Action not permitted
Modal body text goes here.
Modal Title
Modal Body
cve-2020-1971
Vulnerability from cvelistv5
Published
2020-12-08 15:30
Modified
2024-09-17 02:57
Severity ?
EPSS score ?
Summary
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the "-crl_download" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).
References
Impacted products
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T06:54:00.529Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.openssl.org/news/secadv/20201208.txt" }, { "tags": [ "x_transferred" ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920" }, { "tags": [ "x_transferred" ], "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e" }, { "name": "DSA-4807", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://www.debian.org/security/2020/dsa-4807" }, { "name": "FreeBSD-SA-20:33", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc" }, { "name": "[debian-lts-announce] 20201214 [SECURITY] [DLA 2493-1] openssl1.0 security update", "tags": [ "mailing-list", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html" }, { "name": "[debian-lts-announce] 20201214 [SECURITY] [DLA 2492-1] openssl security update", "tags": [ "mailing-list", "x_transferred" ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html" }, { "name": "FEDORA-2020-ef1870065a", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/" }, { "name": "[pulsar-commits] 20201216 [GitHub] [pulsar] phijohns-tibco opened a new issue #8978: OpenSSL needs to be updated to 1.1.1i current version is unsupported.", "tags": [ "mailing-list", "x_transferred" ], "url": "https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E" }, { "name": "FEDORA-2020-a31b01e945", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/" }, { "name": "GLSA-202012-13", "tags": [ "vendor-advisory", "x_transferred" ], "url": "https://security.gentoo.org/glsa/202012-13" }, { "tags": [ "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "tags": [ "x_transferred" ], "url": "https://www.tenable.com/security/tns-2020-11" }, { "tags": [ "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20201218-0005/" }, { "tags": [ "x_transferred" ], "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676" }, { "name": "[tomcat-dev] 20210207 [Bug 65126] New: A security vulnerability cve-2020-1971 in Tomcat dependency Library in version 9.0.40.", "tags": [ "mailing-list", "x_transferred" ], "url": "https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E" }, { "tags": [ "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "tags": [ "x_transferred" ], "url": "https://www.tenable.com/security/tns-2021-10" }, { "tags": [ "x_transferred" ], "url": "https://www.tenable.com/security/tns-2021-09" }, { "tags": [ "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" }, { "tags": [ "x_transferred" ], "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "name": "[oss-security] 20210914 Re: Oracle Solaris membership in the distros list", "tags": [ "mailing-list", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2021/09/14/2" }, { "tags": [ "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "tags": [ "x_transferred" ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "tags": [ "x_transferred" ], "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "tags": [ "x_transferred" ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "OpenSSL", "vendor": "OpenSSL", "versions": [ { "status": "affected", "version": "Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h)" }, { "status": "affected", "version": "Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w)" } ] } ], "credits": [ { "lang": "en", "value": "David Benjamin (Google)" } ], "datePublic": "2020-12-08T00:00:00", "descriptions": [ { "lang": "en", "value": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w)." } ], "metrics": [ { "other": { "content": { "lang": "eng", "url": "https://www.openssl.org/policies/secpolicy.html#High", "value": "High" }, "type": "unknown" } } ], "problemTypes": [ { "descriptions": [ { "description": "NULL pointer dereference", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2024-06-21T19:06:11.147749", "orgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", "shortName": "openssl" }, "references": [ { "url": "https://www.openssl.org/news/secadv/20201208.txt" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920" }, { "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e" }, { "name": "DSA-4807", "tags": [ "vendor-advisory" ], "url": "https://www.debian.org/security/2020/dsa-4807" }, { "name": "FreeBSD-SA-20:33", "tags": [ "vendor-advisory" ], "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc" }, { "name": "[debian-lts-announce] 20201214 [SECURITY] [DLA 2493-1] openssl1.0 security update", "tags": [ "mailing-list" ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html" }, { "name": "[debian-lts-announce] 20201214 [SECURITY] [DLA 2492-1] openssl security update", "tags": [ "mailing-list" ], "url": "https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html" }, { "name": "FEDORA-2020-ef1870065a", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/" }, { "name": "[pulsar-commits] 20201216 [GitHub] [pulsar] phijohns-tibco opened a new issue #8978: OpenSSL needs to be updated to 1.1.1i current version is unsupported.", "tags": [ "mailing-list" ], "url": "https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E" }, { "name": "FEDORA-2020-a31b01e945", "tags": [ "vendor-advisory" ], "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/" }, { "name": "GLSA-202012-13", "tags": [ "vendor-advisory" ], "url": "https://security.gentoo.org/glsa/202012-13" }, { "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "url": "https://www.tenable.com/security/tns-2020-11" }, { "url": "https://security.netapp.com/advisory/ntap-20201218-0005/" }, { "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676" }, { "name": "[tomcat-dev] 20210207 [Bug 65126] New: A security vulnerability cve-2020-1971 in Tomcat dependency Library in version 9.0.40.", "tags": [ "mailing-list" ], "url": "https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E" }, { "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "url": "https://www.tenable.com/security/tns-2021-10" }, { "url": "https://www.tenable.com/security/tns-2021-09" }, { "url": "https://security.netapp.com/advisory/ntap-20210513-0002/" }, { "url": "https://www.oracle.com//security-alerts/cpujul2021.html" }, { "name": "[oss-security] 20210914 Re: Oracle Solaris membership in the distros list", "tags": [ "mailing-list" ], "url": "http://www.openwall.com/lists/oss-security/2021/09/14/2" }, { "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf" }, { "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" } ], "title": "EDIPARTYNAME NULL pointer dereference" } }, "cveMetadata": { "assignerOrgId": "3a12439a-ef3a-4c79-92e6-6081a721f1e5", "assignerShortName": "openssl", "cveId": "CVE-2020-1971", "datePublished": "2020-12-08T15:30:16.835255Z", "dateReserved": "2019-12-03T00:00:00", "dateUpdated": "2024-09-17T02:57:20.238Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "vulnerability-lookup:meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2020-1971\",\"sourceIdentifier\":\"openssl-security@openssl.org\",\"published\":\"2020-12-08T16:15:11.730\",\"lastModified\":\"2024-11-21T05:11:45.673\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \\\"-crl_download\\\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).\"},{\"lang\":\"es\",\"value\":\"El tipo GeneralName X.509 es un tipo gen\u00e9rico para representar diferentes tipos de nombres.\u0026#xa0;Uno de esos tipos de nombres se conoce como EDIPartyName.\u0026#xa0;OpenSSL proporciona una funci\u00f3n GENERAL_NAME_cmp que compara diferentes instancias de GENERAL_NAME para ver si son iguales o no.\u0026#xa0;Esta funci\u00f3n se comporta incorrectamente cuando ambos GENERAL_NAME contienen un EDIPARTYNAME.\u0026#xa0;Es posible que se produzca una desreferencia del puntero NULL y un bloqueo que conduzca a un posible ataque de denegaci\u00f3n de servicio.\u0026#xa0;El propio OpenSSL usa la funci\u00f3n GENERAL_NAME_cmp para dos prop\u00f3sitos:\u0026#xa0;1) Comparaci\u00f3n de nombres de puntos de distribuci\u00f3n de CRL entre una CRL disponible y un punto de distribuci\u00f3n de CRL insertado en un certificado X509 2) Al comparar que un firmante de token de respuesta de marca de tiempo coincide con el nombre de autoridad de marca de tiempo (expuesto por medio de las funciones API TS_RESP_verify_response y TS_RESP_verify_token) Si un atacante puede controlar ambos elementos que se est\u00e1n comparando, entonces ese atacante podr\u00eda desencadenar un bloqueo.\u0026#xa0;Por ejemplo, si el atacante puede enga\u00f1ar a un cliente o servidor para que compruebe un certificado malicioso con una CRL maliciosa, esto puede ocurrir.\u0026#xa0;Tome en cuenta que algunas aplicaciones descargan autom\u00e1ticamente las CRL basadas en una URL insertada en un certificado.\u0026#xa0;Esta comprobaci\u00f3n ocurre antes de que se verifiquen las firmas en el certificado y la CRL.\u0026#xa0;Las herramientas s_server, s_client y verify de OpenSSL tienen soporte para la opci\u00f3n \\\"-crl_download\\\"\u0026#xa0;que implementa la descarga autom\u00e1tica de CRL y se ha demostrado que este ataque funciona contra esas herramientas.\u0026#xa0;Tome en cuenta que un error no relacionado significa que las versiones afectadas de OpenSSL no pueden analizar ni construir codificaciones correctas de EDIPARTYNAME.\u0026#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptar\u00e1 y, por lo tanto, desencadenar\u00e1 este ataque.\u0026#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 est\u00e1n afectadas por este problema.\u0026#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.\u0026#xa0;Corregido en OpenSSL versiones 1.1.1i (Afectado versiones 1.1.1-1.1.1h).\u0026#xa0;Corregido en OpenSSL versiones 1.0.2x (Afectado versiones 1.0.2-1.0.2w).\u0026#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptar\u00e1 y, por lo tanto, desencadenar\u00e1 este ataque.\u0026#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 est\u00e1n afectadas por este problema.\u0026#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.\u0026#xa0;Corregido en OpenSSL versi\u00f3n 1.1.1i (Afectada versi\u00f3n 1.1.1-1.1.1h).\u0026#xa0;Corregido en OpenSSL versi\u00f3n 1.0.2x (Afectada versi\u00f3n 1.0.2-1.0.2w).\u0026#xa0;Sin embargo, es posible construir un EDIPARTYNAME malformado que el analizador de OpenSSL aceptar\u00e1 y, por lo tanto, desencadenar\u00e1 este ataque.\u0026#xa0;Todas las versiones de OpenSSL 1.1.1 y 1.0.2 est\u00e1n afectadas por este problema.\u0026#xa0;Otras versiones de OpenSSL no son compatibles y no se han comprobado.\u0026#xa0;Corregido en OpenSSL versi\u00f3n 1.1.1i (Afectada versi\u00f3n 1.1.1-1.1.1h).\u0026#xa0;Corregido en OpenSSL versi\u00f3n 1.0.2x (Afectada versi\u00f3n 1.0.2-1.0.2w)\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.9,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:N/A:P\",\"baseScore\":4.3,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.0.2\",\"versionEndExcluding\":\"1.0.2x\",\"matchCriteriaId\":\"4D0947DA-4A07-4C73-9FE7-7666734C568B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.1\",\"versionEndExcluding\":\"1.1.1i\",\"matchCriteriaId\":\"BFE3E95C-90F0-48C0-A737-28AD6AC2BDB8\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEECE5FC-CACF-4496-A3E7-164736409252\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:api_gateway:11.1.2.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5553591-073B-45E3-999F-21B8BA2EEE22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"D40AD626-B23A-44A3-A6C0-1FFB4D647AE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"B602F9E8-1580-436C-A26D-6E6F8121A583\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"77C3DD16-1D81-40E1-B312-50FBD275507C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"81DAC8C0-D342-44B5-9432-6B88D389584F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2A5B24D-BDF2-423C-98EA-A40778C01A05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.0\",\"versionEndIncluding\":\"8.1.0\",\"matchCriteriaId\":\"B5B4A191-44AE-4C35-9164-19237D2CF013\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.2.0\",\"versionEndIncluding\":\"8.2.3\",\"matchCriteriaId\":\"A543B4F8-149A-48AB-B388-AB7FA2ECAC18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_border_controller:cz8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45F90ABB-2633-447C-B510-D63D9898BD67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_border_controller:cz8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22822A0F-A2C4-427A-931F-428D2C010ECD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_border_controller:cz8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62A561CF-09BE-4EDB-AAB7-4B057C0B0E44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_router:cz8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58E8C3A9-1B8B-4D13-B0E9-DC620F619DD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_router:cz8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C880943-5A11-483E-9DA8-88D1D487BAA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_session_router:cz8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ECF63433-30CC-4E0D-B66A-FD160111763B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"662B8154-6FFA-4B63-B5AD-18B1CECB3AF6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F2BFCE3-D743-4AC6-8FEC-75CAF66BFB65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_subscriber-aware_load_balancer:cz8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8D05530-BFC7-4652-B387-BC931F43AB5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:communications_unified_session_manager:scz8.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A200B074-61AF-4E1D-8F96-A73BECF81BC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83739D8B-EAA0-43CD-B0EB-278C2F65CA42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D3AD28E-4372-4B22-A0B9-B9BA7760E381\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_communications_broker:pcz3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B317147-064A-4786-B3D6-CDE1653E067E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7582B307-3899-4BBB-B868-BC912A4D0109\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"61516569-C48F-4362-B334-8CA10EDB0EC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B095CC03-7077-4A58-AB25-CC5380CDCE5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC124081-4465-4A80-897A-1DAC1013915E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B2AFC7C4-9FCC-425B-A010-F9EA0665753F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:enterprise_session_border_controller:cz8.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FC109637-7BCA-4E9D-AC51-48D488E17E2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"394A16F2-CCD4-44E5-BF6B-E0C782A9FA38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:19.3.4:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"937F66F5-F5BA-4156-82E0-EB2C99ABD41A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:graalvm:20.3.0:*:*:*:enterprise:*:*:*\",\"matchCriteriaId\":\"BC0F8B31-F93B-40B6-9C06-A3996DC63829\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD04BEE5-E9A8-4584-A68C-0195CE9C402C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.2.5.3\",\"matchCriteriaId\":\"4BCA7DD9-8599-4E43-9D82-999BE15483B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B1CAD50-749F-4ADB-A046-BF3585677A58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"8.0.22\",\"matchCriteriaId\":\"16DEEDB2-E304-41A3-97DB-EDDFB16BE624\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"5.7.32\",\"matchCriteriaId\":\"B4335442-548B-48AB-A399-DB146C6A8705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"8.0.15\",\"versionEndIncluding\":\"8.0.22\",\"matchCriteriaId\":\"B7EAD39D-A892-4667-89D9-F66A33EAF9B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0A735B4-4F3C-416B-8C08-9CB21BAD2889\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E1E416B-920B-49A0-9523-382898C2979D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*\",\"matchCriteriaId\":\"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*\",\"matchCriteriaId\":\"B55E8D50-99B4-47EC-86F9-699B67D473CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:clustered_data_ontap_antivirus_connector:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62347994-1353-497C-9C4A-D5D8D95F67E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:data_ontap:-:*:*:*:*:7-mode:*:*\",\"matchCriteriaId\":\"6C2ACC32-5147-4EA5-95BE-B6B4EAB3D82B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.0.0\",\"versionEndIncluding\":\"11.60.3\",\"matchCriteriaId\":\"BD1E9594-C46F-40D1-8BC2-6B16635B55C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A3C19813-E823-456A-B1CE-EC0684CE1953\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:manageability_software_development_kit:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D39DCAE7-494F-40B2-867F-6C6A077939DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1BE6C1F-2565-4E97-92AA-16563E5660A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5735E553-9731-4AAC-BCFF-989377F817B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:plug-in_for_symantec_netbackup:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFE0A9D2-9A49-4BF6-BC6F-8249162D8334\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"361B791A-D336-4431-8F68-8135BEFFAEA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BDFB1169-41A0-4A86-8E4F-FDA9730B1E94\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AD7447BC-F315-4298-A822-549942FC118B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02DEB4FB-A21D-4CB1-B522-EEE5093E8521\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:ef600a_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5356D8E0-38AB-44F2-BA0A-F884C92222D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:ef600a:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"44824034-DB0C-47AC-A32F-1EA373F30A61\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D5DE972-F8B8-4964-943A-DA0BD18289D1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4B1F59C-6ADA-4930-834F-2A8A8444F6AE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"6.0.9\",\"matchCriteriaId\":\"4ACF85D6-6B45-43DA-9C01-F0208186F014\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:tenable:nessus_network_monitor:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.13.1\",\"matchCriteriaId\":\"A87E730E-019C-4DCB-BA73-3994ECEF0C66\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.0.1.1\",\"matchCriteriaId\":\"B0F46497-4AB0-49A7-9453-CC26837BF253\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"10.0.0\",\"versionEndIncluding\":\"10.12.0\",\"matchCriteriaId\":\"25A3180B-21AF-4010-9DAB-41ADFD2D8031\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"10.13.0\",\"versionEndExcluding\":\"10.23.1\",\"matchCriteriaId\":\"33081E31-5166-4064-91AA-951F5CD930D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndIncluding\":\"12.12.0\",\"matchCriteriaId\":\"564ED5C8-50D7-413A-B88E-E62B6C07336A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"12.13.0\",\"versionEndExcluding\":\"12.20.1\",\"matchCriteriaId\":\"58879E00-2C36-4C1B-9993-2422346624D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"14.0.0\",\"versionEndIncluding\":\"14.14.0\",\"matchCriteriaId\":\"428DCD7B-6F66-4F18-B780-5BD80143D482\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*\",\"versionStartIncluding\":\"14.15.0\",\"versionEndExcluding\":\"14.15.4\",\"matchCriteriaId\":\"2F2D8EEB-7A9E-472A-B820-A3C33CB93B61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*\",\"versionStartIncluding\":\"15.0.0\",\"versionEndExcluding\":\"15.5.0\",\"matchCriteriaId\":\"1A868E7E-C25A-4B2A-BB37-7F2584ECB2D4\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2021/09/14/2\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202012-13\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20201218-0005/\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210513-0002/\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"openssl-security@openssl.org\"},{\"url\":\"https://www.debian.org/security/2020/dsa-4807\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20201208.txt\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2020-11\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-09\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-10\",\"source\":\"openssl-security@openssl.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2021/09/14/2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2154ab83e14ede338d2ede9bbe5cdfce5d5a6c9e\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=f960d81215ebf3f65e03d4d5d857fb9b666d6920\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44676\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.apache.org/thread.html/r63c6f2dd363d9b514d0a4bcf624580616a679898cc14c109a49b750c%40%3Cdev.tomcat.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.apache.org/thread.html/rbb769f771711fb274e0a4acb1b5911c8aab544a6ac5e8c12d40c5143%40%3Ccommits.pulsar.apache.org%3E\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00020.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2020/12/msg00021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DGSI34Y5LQ5RYXN4M2I5ZQT65LFVDOUU/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PWPSSZNZOBJU2YR6Z4TGHXKYW3YP5QG7/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.FreeBSD.org/advisories/FreeBSD-SA-20:33.openssl.asc\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.gentoo.org/glsa/202012-13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20201218-0005/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20210513-0002/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20240621-0006/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.debian.org/security/2020/dsa-4807\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.openssl.org/news/secadv/20201208.txt\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.oracle.com//security-alerts/cpujul2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuApr2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuapr2022.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpujan2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.oracle.com/security-alerts/cpuoct2021.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2020-11\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-09\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.tenable.com/security/tns-2021-10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}" } }
rhsa-2020:5640
Vulnerability from csaf_redhat
Published
2020-12-21 12:07
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5640", "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5640.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:42+00:00", "generator": { "date": "2024-11-22T15:56:42+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5640", "initial_release_date": "2020-12-21T12:07:09+00:00", "revision_history": [ { "date": "2020-12-21T12:07:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:07:09+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:42+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.src", "product": { "name": "openssl-1:1.0.1e-61.el7_3.src", "product_id": "openssl-1:1.0.1e-61.el7_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:07:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5637
Vulnerability from csaf_redhat
Published
2020-12-21 08:37
Modified
2024-11-22 15:57
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5637", "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5637.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:57:07+00:00", "generator": { "date": "2024-11-22T15:57:07+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5637", "initial_release_date": "2020-12-21T08:37:06+00:00", "revision_history": [ { "date": "2020-12-21T08:37:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T08:37:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:57:07+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.1::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.src", "product": { "name": "openssl-1:1.1.1c-3.el8_1.src", "product_id": "openssl-1:1.1.1c-3.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.src", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T08:37:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5640
Vulnerability from csaf_redhat
Published
2020-12-21 12:07
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5640", "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5640.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:42+00:00", "generator": { "date": "2024-11-22T15:56:42+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5640", "initial_release_date": "2020-12-21T12:07:09+00:00", "revision_history": [ { "date": "2020-12-21T12:07:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:07:09+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:42+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.src", "product": { "name": "openssl-1:1.0.1e-61.el7_3.src", "product_id": "openssl-1:1.0.1e-61.el7_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:07:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5623
Vulnerability from csaf_redhat
Published
2020-12-17 17:01
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5623", "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5623.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:25+00:00", "generator": { "date": "2024-11-22T15:56:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5623", "initial_release_date": "2020-12-17T17:01:47+00:00", "revision_history": [ { "date": "2020-12-17T17:01:47+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-17T17:01:47+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.src", "product": { "name": "openssl-1:1.0.2k-20.el7_7.src", "product_id": "openssl-1:1.0.2k-20.el7_7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-17T17:01:47+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5476
Vulnerability from csaf_redhat
Published
2020-12-15 17:22
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security and bug fix update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)
* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)\n\n* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5476", "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5476.json" } ], "title": "Red Hat Security Advisory: openssl security and bug fix update", "tracking": { "current_release_date": "2024-11-22T15:56:01+00:00", "generator": { "date": "2024-11-22T15:56:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5476", "initial_release_date": "2020-12-15T17:22:46+00:00", "revision_history": [ { "date": "2020-12-15T17:22:46+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T17:22:46+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.src", "product": { "name": "openssl-1:1.1.1g-12.el8_3.src", "product_id": "openssl-1:1.1.1g-12.el8_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.src", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T17:22:46+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2025-02-28 01:28
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0949", "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html", "url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html" }, { "category": "external", "summary": "1832983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update", "tracking": { "current_release_date": "2025-02-28T01:28:29+00:00", "generator": { "date": "2025-02-28T01:28:29+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.3.1" } }, "id": "RHSA-2021:0949", "initial_release_date": "2021-03-22T10:10:55+00:00", "revision_history": [ { "date": "2021-03-22T10:10:55+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-03-22T10:10:55+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-02-28T01:28:29+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Do 1", "product": { "name": "OpenShift Do 1", "product_id": "7Server-RHODO-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_do:1.0::el7" } } } ], "category": "product_family", "name": "OpenShift Do" }, { "branches": [ { "category": "product_version", "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_identification_helper": { "purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1", "product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" }, "product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "relates_to_product_reference": "7Server-RHODO-1" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-20843", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-06-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1723723" } ], "notes": [ { "category": "description", "text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS", "title": "Vulnerability summary" }, { "category": "other", "text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-20843" }, { "category": "external", "summary": "RHBZ#1723723", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843", "url": "https://www.cve.org/CVERecord?id=CVE-2018-20843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843" }, { "category": "external", "summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031" } ], "release_date": "2019-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS" }, { "cve": "CVE-2019-5094", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2019-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1768555" } ], "notes": [ { "category": "description", "text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5094" }, { "category": "external", "summary": "RHBZ#1768555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5094" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094" }, { "category": "external", "summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887" } ], "release_date": "2019-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write" }, { "cve": "CVE-2019-5188", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2020-01-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1790048" } ], "notes": [ { "category": "description", "text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5188" }, { "category": "external", "summary": "RHBZ#1790048", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5188" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188" } ], "release_date": "2020-01-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c" }, { "acknowledgments": [ { "names": [ "the Curl project" ] }, { "names": [ "Thomas Vegas" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-5482", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1749652" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: heap buffer overflow in function tftp_receive_packet()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5482" }, { "category": "external", "summary": "RHBZ#1749652", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5482" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2019-5482.html", "url": "https://curl.haxx.se/docs/CVE-2019-5482.html" } ], "release_date": "2019-09-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Do not use TFTP with curl with smaller than the default BLKSIZE.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: heap buffer overflow in function tftp_receive_packet()" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Henry Corrigan-Gibbs" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11719", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-07-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1728436" } ], "notes": [ { "category": "description", "text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Out-of-bounds read when importing curve25519 private key", "title": "Vulnerability summary" }, { "category": "other", "text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11719" }, { "category": "external", "summary": "RHBZ#1728436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719" } ], "release_date": "2019-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Out-of-bounds read when importing curve25519 private key" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Hubert Kario" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11727", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2019-07-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1730988" } ], "notes": [ { "category": "description", "text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11727" }, { "category": "external", "summary": "RHBZ#1730988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727" } ], "release_date": "2019-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.4, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] } ], "cve": "CVE-2019-11756", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774835" } ], "notes": [ { "category": "description", "text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11756" }, { "category": "external", "summary": "RHBZ#1774835", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting" }, { "cve": "CVE-2019-12450", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "discovery_date": "2019-06-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719141" } ], "notes": [ { "category": "description", "text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.", "title": "Vulnerability description" }, { "category": "summary", "text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12450" }, { "category": "external", "summary": "RHBZ#1719141", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12450" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450" } ], "release_date": "2019-05-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress" }, { "acknowledgments": [ { "names": [ "the D-Bus project" ] }, { "names": [ "Joe Vennix" ], "organization": "Apple Information Security", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-12749", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2019-06-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719344" } ], "notes": [ { "category": "description", "text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12749" }, { "category": "external", "summary": "RHBZ#1719344", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12749" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2", "url": "https://www.openwall.com/lists/oss-security/2019/06/11/2" } ], "release_date": "2019-06-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass" }, { "acknowledgments": [ { "names": [ "Simon McVittie" ], "organization": "Collabora Ltd." } ], "cve": "CVE-2019-14822", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2019-06-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1717958" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.", "title": "Vulnerability description" }, { "category": "summary", "text": "ibus: missing authorization allows local attacker to access the input bus of another user", "title": "Vulnerability summary" }, { "category": "other", "text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14822" }, { "category": "external", "summary": "RHBZ#1717958", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14822" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822" } ], "release_date": "2019-09-13T07:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "ibus: missing authorization allows local attacker to access the input bus of another user" }, { "acknowledgments": [ { "names": [ "Thomas Habets" ] } ], "cve": "CVE-2019-14866", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-10-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1765511" } ], "notes": [ { "category": "description", "text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.", "title": "Vulnerability description" }, { "category": "summary", "text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14866" }, { "category": "external", "summary": "RHBZ#1765511", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14866" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866" } ], "release_date": "2019-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation" }, { "cve": "CVE-2019-15903", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-09-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1752592" } ], "notes": [ { "category": "description", "text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: heap-based buffer over-read via crafted XML input", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-15903" }, { "category": "external", "summary": "RHBZ#1752592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903", "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903" } ], "release_date": "2019-09-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "expat: heap-based buffer over-read via crafted XML input" }, { "cve": "CVE-2019-16935", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2019-09-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1763229" } ], "notes": [ { "category": "description", "text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-16935" }, { "category": "external", "summary": "RHBZ#1763229", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16935" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935" } ], "release_date": "2019-09-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2019-17006", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-11-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1775916" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Check length of inputs for cryptographic primitives", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17006" }, { "category": "external", "summary": "RHBZ#1775916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes" } ], "release_date": "2019-12-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Check length of inputs for cryptographic primitives" }, { "cve": "CVE-2019-17023", "discovery_date": "2020-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1791225" } ], "notes": [ { "category": "description", "text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17023" }, { "category": "external", "summary": "RHBZ#1791225", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state" }, { "cve": "CVE-2019-17498", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-10-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1766898" } ], "notes": [ { "category": "description", "text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.", "title": "Vulnerability description" }, { "category": "summary", "text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17498" }, { "category": "external", "summary": "RHBZ#1766898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17498" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498" }, { "category": "external", "summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/", "url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/" } ], "release_date": "2019-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c" }, { "cve": "CVE-2019-19126", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774681" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19126" }, { "category": "external", "summary": "RHBZ#1774681", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19126" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126" } ], "release_date": "2019-11-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries" }, { "cve": "CVE-2019-19956", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "discovery_date": "2020-01-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1788856" } ], "notes": [ { "category": "description", "text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19956" }, { "category": "external", "summary": "RHBZ#1788856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c" }, { "cve": "CVE-2019-20386", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793979" } ], "notes": [ { "category": "description", "text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.", "title": "Vulnerability description" }, { "category": "summary", "text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received", "title": "Vulnerability summary" }, { "category": "other", "text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20386" }, { "category": "external", "summary": "RHBZ#1793979", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20386" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386" } ], "release_date": "2020-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received" }, { "cve": "CVE-2019-20388", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799734" } ], "notes": [ { "category": "description", "text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20388" }, { "category": "external", "summary": "RHBZ#1799734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c" }, { "cve": "CVE-2019-20907", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1856481" } ], "notes": [ { "category": "description", "text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: infinite loop in the tarfile module via crafted TAR archive", "title": "Vulnerability summary" }, { "category": "other", "text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20907" }, { "category": "external", "summary": "RHBZ#1856481", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20907" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This flaw can be mitigated by not opening untrusted files with tarfile.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: infinite loop in the tarfile module via crafted TAR archive" }, { "cve": "CVE-2019-25013", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-01-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1912960" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-25013" }, { "category": "external", "summary": "RHBZ#1912960", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013", "url": "https://www.cve.org/CVERecord?id=CVE-2019-25013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013" } ], "release_date": "2019-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding" }, { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom", "Billy Bob Brumley" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-6829", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826187" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel attack on ECDSA signature generation", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6829" }, { "category": "external", "summary": "RHBZ#1826187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel attack on ECDSA signature generation" }, { "cve": "CVE-2020-7595", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799786" } ], "notes": [ { "category": "description", "text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-7595" }, { "category": "external", "summary": "RHBZ#1799786", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations" }, { "cve": "CVE-2020-8177", "discovery_date": "2020-06-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1847915" } ], "notes": [ { "category": "description", "text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: Incorrect argument check can allow remote servers to overwrite local files", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-8177" }, { "category": "external", "summary": "RHBZ#1847915", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177", "url": "https://www.cve.org/CVERecord?id=CVE-2020-8177" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2020-8177.html", "url": "https://curl.haxx.se/docs/CVE-2020-8177.html" } ], "release_date": "2020-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: Incorrect argument check can allow remote servers to overwrite local files" }, { "cve": "CVE-2020-10029", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-03-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1810670" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions", "title": "Vulnerability summary" }, { "category": "other", "text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-10029" }, { "category": "external", "summary": "RHBZ#1810670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029" } ], "release_date": "2020-02-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions" }, { "cve": "CVE-2020-12243", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-04-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1833535" } ], "notes": [ { "category": "description", "text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).", "title": "Vulnerability description" }, { "category": "summary", "text": "openldap: denial of service via nested boolean expressions in LDAP search filters", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12243" }, { "category": "external", "summary": "RHBZ#1833535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243" } ], "release_date": "2020-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openldap: denial of service via nested boolean expressions in LDAP search filters" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12400", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-07-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1853983" } ], "notes": [ { "category": "description", "text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12400" }, { "category": "external", "summary": "RHBZ#1853983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12401", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-06-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1851294" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: ECDSA timing attack mitigation bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12401" }, { "category": "external", "summary": "RHBZ#1851294", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: ECDSA timing attack mitigation bypass" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Billy Bob Brumley", "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12402", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826231" } ], "notes": [ { "category": "description", "text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel vulnerabilities during RSA key generation", "title": "Vulnerability summary" }, { "category": "other", "text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12402" }, { "category": "external", "summary": "RHBZ#1826231", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel vulnerabilities during RSA key generation" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2020-12403", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2020-08-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1868931" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12403" }, { "category": "external", "summary": "RHBZ#1868931", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read" }, { "cve": "CVE-2020-29573", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-12-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1905213" } ], "notes": [ { "category": "description", "text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern", "title": "Vulnerability summary" }, { "category": "other", "text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-29573" }, { "category": "external", "summary": "RHBZ#1905213", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573", "url": "https://www.cve.org/CVERecord?id=CVE-2020-29573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573" }, { "category": "external", "summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html", "url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html" } ], "release_date": "2020-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern" } ] }
rhsa-2020_5623
Vulnerability from csaf_redhat
Published
2020-12-17 17:01
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5623", "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5623.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:25+00:00", "generator": { "date": "2024-11-22T15:56:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5623", "initial_release_date": "2020-12-17T17:01:47+00:00", "revision_history": [ { "date": "2020-12-17T17:01:47+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-17T17:01:47+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.src", "product": { "name": "openssl-1:1.0.2k-20.el7_7.src", "product_id": "openssl-1:1.0.2k-20.el7_7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-17T17:01:47+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0491
Vulnerability from csaf_redhat
Published
2021-02-11 13:39
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0491", "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0491.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:43+00:00", "generator": { "date": "2024-11-22T15:56:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0491", "initial_release_date": "2021-02-11T13:39:36+00:00", "revision_history": [ { "date": "2021-02-11T13:39:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:39:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1", "product": { "name": "Red Hat JBoss Web Server 3.1", "product_id": "Red Hat JBoss Web Server 3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 3.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:39:36+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 3.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0486
Vulnerability from csaf_redhat
Published
2021-02-11 13:19
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0486", "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0486.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:05+00:00", "generator": { "date": "2024-11-22T15:56:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0486", "initial_release_date": "2021-02-11T13:19:08+00:00", "revision_history": [ { "date": "2021-02-11T13:19:08+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:19:08+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-11.redhat_1.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-66.jbcs.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:19:08+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0494
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2025-04-13 01:18
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0494", "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0494.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2025-04-13T01:18:53+00:00", "generator": { "date": "2025-04-13T01:18:53+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.2" } }, "id": "RHSA-2021:0494", "initial_release_date": "2021-02-11T13:51:48+00:00", "revision_history": [ { "date": "2021-02-11T13:51:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-04-13T01:18:53+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el7" } } }, { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el8" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.\n\npki-servlet-engine has been obsoleted by Tomcat in Red Hat Enterprise Linux 8.9 and later. Therefore no additional fixes would be made available for the servlet engine.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
rhsa-2021:0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2025-02-28 01:28
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0949", "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html", "url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html" }, { "category": "external", "summary": "1832983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update", "tracking": { "current_release_date": "2025-02-28T01:28:29+00:00", "generator": { "date": "2025-02-28T01:28:29+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.3.1" } }, "id": "RHSA-2021:0949", "initial_release_date": "2021-03-22T10:10:55+00:00", "revision_history": [ { "date": "2021-03-22T10:10:55+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-03-22T10:10:55+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-02-28T01:28:29+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Do 1", "product": { "name": "OpenShift Do 1", "product_id": "7Server-RHODO-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_do:1.0::el7" } } } ], "category": "product_family", "name": "OpenShift Do" }, { "branches": [ { "category": "product_version", "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_identification_helper": { "purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1", "product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" }, "product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "relates_to_product_reference": "7Server-RHODO-1" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-20843", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-06-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1723723" } ], "notes": [ { "category": "description", "text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS", "title": "Vulnerability summary" }, { "category": "other", "text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-20843" }, { "category": "external", "summary": "RHBZ#1723723", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843", "url": "https://www.cve.org/CVERecord?id=CVE-2018-20843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843" }, { "category": "external", "summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031" } ], "release_date": "2019-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS" }, { "cve": "CVE-2019-5094", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2019-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1768555" } ], "notes": [ { "category": "description", "text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5094" }, { "category": "external", "summary": "RHBZ#1768555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5094" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094" }, { "category": "external", "summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887" } ], "release_date": "2019-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write" }, { "cve": "CVE-2019-5188", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2020-01-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1790048" } ], "notes": [ { "category": "description", "text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5188" }, { "category": "external", "summary": "RHBZ#1790048", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5188" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188" } ], "release_date": "2020-01-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c" }, { "acknowledgments": [ { "names": [ "the Curl project" ] }, { "names": [ "Thomas Vegas" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-5482", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1749652" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: heap buffer overflow in function tftp_receive_packet()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5482" }, { "category": "external", "summary": "RHBZ#1749652", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5482" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2019-5482.html", "url": "https://curl.haxx.se/docs/CVE-2019-5482.html" } ], "release_date": "2019-09-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Do not use TFTP with curl with smaller than the default BLKSIZE.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: heap buffer overflow in function tftp_receive_packet()" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Henry Corrigan-Gibbs" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11719", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-07-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1728436" } ], "notes": [ { "category": "description", "text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Out-of-bounds read when importing curve25519 private key", "title": "Vulnerability summary" }, { "category": "other", "text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11719" }, { "category": "external", "summary": "RHBZ#1728436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719" } ], "release_date": "2019-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Out-of-bounds read when importing curve25519 private key" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Hubert Kario" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11727", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2019-07-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1730988" } ], "notes": [ { "category": "description", "text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11727" }, { "category": "external", "summary": "RHBZ#1730988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727" } ], "release_date": "2019-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.4, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] } ], "cve": "CVE-2019-11756", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774835" } ], "notes": [ { "category": "description", "text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11756" }, { "category": "external", "summary": "RHBZ#1774835", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting" }, { "cve": "CVE-2019-12450", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "discovery_date": "2019-06-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719141" } ], "notes": [ { "category": "description", "text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.", "title": "Vulnerability description" }, { "category": "summary", "text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12450" }, { "category": "external", "summary": "RHBZ#1719141", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12450" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450" } ], "release_date": "2019-05-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress" }, { "acknowledgments": [ { "names": [ "the D-Bus project" ] }, { "names": [ "Joe Vennix" ], "organization": "Apple Information Security", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-12749", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2019-06-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719344" } ], "notes": [ { "category": "description", "text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12749" }, { "category": "external", "summary": "RHBZ#1719344", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12749" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2", "url": "https://www.openwall.com/lists/oss-security/2019/06/11/2" } ], "release_date": "2019-06-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass" }, { "acknowledgments": [ { "names": [ "Simon McVittie" ], "organization": "Collabora Ltd." } ], "cve": "CVE-2019-14822", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2019-06-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1717958" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.", "title": "Vulnerability description" }, { "category": "summary", "text": "ibus: missing authorization allows local attacker to access the input bus of another user", "title": "Vulnerability summary" }, { "category": "other", "text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14822" }, { "category": "external", "summary": "RHBZ#1717958", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14822" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822" } ], "release_date": "2019-09-13T07:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "ibus: missing authorization allows local attacker to access the input bus of another user" }, { "acknowledgments": [ { "names": [ "Thomas Habets" ] } ], "cve": "CVE-2019-14866", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-10-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1765511" } ], "notes": [ { "category": "description", "text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.", "title": "Vulnerability description" }, { "category": "summary", "text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14866" }, { "category": "external", "summary": "RHBZ#1765511", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14866" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866" } ], "release_date": "2019-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation" }, { "cve": "CVE-2019-15903", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-09-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1752592" } ], "notes": [ { "category": "description", "text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: heap-based buffer over-read via crafted XML input", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-15903" }, { "category": "external", "summary": "RHBZ#1752592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903", "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903" } ], "release_date": "2019-09-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "expat: heap-based buffer over-read via crafted XML input" }, { "cve": "CVE-2019-16935", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2019-09-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1763229" } ], "notes": [ { "category": "description", "text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-16935" }, { "category": "external", "summary": "RHBZ#1763229", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16935" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935" } ], "release_date": "2019-09-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2019-17006", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-11-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1775916" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Check length of inputs for cryptographic primitives", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17006" }, { "category": "external", "summary": "RHBZ#1775916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes" } ], "release_date": "2019-12-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Check length of inputs for cryptographic primitives" }, { "cve": "CVE-2019-17023", "discovery_date": "2020-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1791225" } ], "notes": [ { "category": "description", "text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17023" }, { "category": "external", "summary": "RHBZ#1791225", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state" }, { "cve": "CVE-2019-17498", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-10-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1766898" } ], "notes": [ { "category": "description", "text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.", "title": "Vulnerability description" }, { "category": "summary", "text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17498" }, { "category": "external", "summary": "RHBZ#1766898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17498" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498" }, { "category": "external", "summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/", "url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/" } ], "release_date": "2019-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c" }, { "cve": "CVE-2019-19126", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774681" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19126" }, { "category": "external", "summary": "RHBZ#1774681", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19126" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126" } ], "release_date": "2019-11-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries" }, { "cve": "CVE-2019-19956", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "discovery_date": "2020-01-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1788856" } ], "notes": [ { "category": "description", "text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19956" }, { "category": "external", "summary": "RHBZ#1788856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c" }, { "cve": "CVE-2019-20386", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793979" } ], "notes": [ { "category": "description", "text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.", "title": "Vulnerability description" }, { "category": "summary", "text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received", "title": "Vulnerability summary" }, { "category": "other", "text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20386" }, { "category": "external", "summary": "RHBZ#1793979", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20386" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386" } ], "release_date": "2020-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received" }, { "cve": "CVE-2019-20388", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799734" } ], "notes": [ { "category": "description", "text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20388" }, { "category": "external", "summary": "RHBZ#1799734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c" }, { "cve": "CVE-2019-20907", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1856481" } ], "notes": [ { "category": "description", "text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: infinite loop in the tarfile module via crafted TAR archive", "title": "Vulnerability summary" }, { "category": "other", "text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20907" }, { "category": "external", "summary": "RHBZ#1856481", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20907" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This flaw can be mitigated by not opening untrusted files with tarfile.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: infinite loop in the tarfile module via crafted TAR archive" }, { "cve": "CVE-2019-25013", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-01-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1912960" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-25013" }, { "category": "external", "summary": "RHBZ#1912960", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013", "url": "https://www.cve.org/CVERecord?id=CVE-2019-25013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013" } ], "release_date": "2019-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding" }, { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom", "Billy Bob Brumley" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-6829", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826187" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel attack on ECDSA signature generation", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6829" }, { "category": "external", "summary": "RHBZ#1826187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel attack on ECDSA signature generation" }, { "cve": "CVE-2020-7595", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799786" } ], "notes": [ { "category": "description", "text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-7595" }, { "category": "external", "summary": "RHBZ#1799786", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations" }, { "cve": "CVE-2020-8177", "discovery_date": "2020-06-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1847915" } ], "notes": [ { "category": "description", "text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: Incorrect argument check can allow remote servers to overwrite local files", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-8177" }, { "category": "external", "summary": "RHBZ#1847915", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177", "url": "https://www.cve.org/CVERecord?id=CVE-2020-8177" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2020-8177.html", "url": "https://curl.haxx.se/docs/CVE-2020-8177.html" } ], "release_date": "2020-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: Incorrect argument check can allow remote servers to overwrite local files" }, { "cve": "CVE-2020-10029", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-03-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1810670" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions", "title": "Vulnerability summary" }, { "category": "other", "text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-10029" }, { "category": "external", "summary": "RHBZ#1810670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029" } ], "release_date": "2020-02-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions" }, { "cve": "CVE-2020-12243", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-04-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1833535" } ], "notes": [ { "category": "description", "text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).", "title": "Vulnerability description" }, { "category": "summary", "text": "openldap: denial of service via nested boolean expressions in LDAP search filters", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12243" }, { "category": "external", "summary": "RHBZ#1833535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243" } ], "release_date": "2020-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openldap: denial of service via nested boolean expressions in LDAP search filters" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12400", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-07-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1853983" } ], "notes": [ { "category": "description", "text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12400" }, { "category": "external", "summary": "RHBZ#1853983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12401", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-06-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1851294" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: ECDSA timing attack mitigation bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12401" }, { "category": "external", "summary": "RHBZ#1851294", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: ECDSA timing attack mitigation bypass" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Billy Bob Brumley", "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12402", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826231" } ], "notes": [ { "category": "description", "text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel vulnerabilities during RSA key generation", "title": "Vulnerability summary" }, { "category": "other", "text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12402" }, { "category": "external", "summary": "RHBZ#1826231", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel vulnerabilities during RSA key generation" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2020-12403", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2020-08-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1868931" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12403" }, { "category": "external", "summary": "RHBZ#1868931", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read" }, { "cve": "CVE-2020-29573", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-12-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1905213" } ], "notes": [ { "category": "description", "text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern", "title": "Vulnerability summary" }, { "category": "other", "text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-29573" }, { "category": "external", "summary": "RHBZ#1905213", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573", "url": "https://www.cve.org/CVERecord?id=CVE-2020-29573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573" }, { "category": "external", "summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html", "url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html" } ], "release_date": "2020-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern" } ] }
RHSA-2020:5422
Vulnerability from csaf_redhat
Published
2020-12-15 09:04
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5422", "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5422.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:54+00:00", "generator": { "date": "2024-11-22T15:55:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5422", "initial_release_date": "2020-12-15T09:04:53+00:00", "revision_history": [ { "date": "2020-12-15T09:04:53+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T09:04:53+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.2::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.src", "product": { "name": "openssl-1:1.1.1c-16.el8_2.src", "product_id": "openssl-1:1.1.1c-16.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.src", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T09:04:53+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0495
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2025-04-13 01:19
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0495", "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0495.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2025-04-13T01:19:02+00:00", "generator": { "date": "2025-04-13T01:19:02+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.2" } }, "id": "RHSA-2021:0495", "initial_release_date": "2021-02-11T13:51:32+00:00", "revision_history": [ { "date": "2021-02-11T13:51:32+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:32+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-04-13T01:19:02+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5", "product": { "name": "Red Hat JBoss Web Server 5", "product_id": "Red Hat JBoss Web Server 5", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 5" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.\n\npki-servlet-engine has been obsoleted by Tomcat in Red Hat Enterprise Linux 8.9 and later. Therefore no additional fixes would be made available for the servlet engine.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
rhsa-2020:5588
Vulnerability from csaf_redhat
Published
2020-12-16 15:15
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5588", "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5588.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:09+00:00", "generator": { "date": "2024-11-22T15:56:09+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5588", "initial_release_date": "2020-12-16T15:15:01+00:00", "revision_history": [ { "date": "2020-12-16T15:15:01+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T15:15:01+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:09+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product": { "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:8.0::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.src", "product": { "name": "openssl-1:1.1.1-9.el8_0.src", "product_id": "openssl-1:1.1.1-9.el8_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_id": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src" }, "product_reference": "openssl-1:1.1.1-9.el8_0.src", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T15:15:01+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5422
Vulnerability from csaf_redhat
Published
2020-12-15 09:04
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5422", "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5422.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:54+00:00", "generator": { "date": "2024-11-22T15:55:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5422", "initial_release_date": "2020-12-15T09:04:53+00:00", "revision_history": [ { "date": "2020-12-15T09:04:53+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T09:04:53+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.2::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.src", "product": { "name": "openssl-1:1.1.1c-16.el8_2.src", "product_id": "openssl-1:1.1.1c-16.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.src", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T09:04:53+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0056
Vulnerability from csaf_redhat
Published
2021-01-11 10:34
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0056", "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0056.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:58+00:00", "generator": { "date": "2024-11-22T15:55:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0056", "initial_release_date": "2021-01-11T10:34:05+00:00", "revision_history": [ { "date": "2021-01-11T10:34:05+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-01-11T10:34:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.src", "product": { "name": "openssl-0:1.0.1e-59.el6_10.src", "product_id": "openssl-0:1.0.1e-59.el6_10.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-01-11T10:34:05+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5637
Vulnerability from csaf_redhat
Published
2020-12-21 08:37
Modified
2024-11-22 15:57
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5637", "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5637.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:57:07+00:00", "generator": { "date": "2024-11-22T15:57:07+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5637", "initial_release_date": "2020-12-21T08:37:06+00:00", "revision_history": [ { "date": "2020-12-21T08:37:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T08:37:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:57:07+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.1::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.src", "product": { "name": "openssl-1:1.1.1c-3.el8_1.src", "product_id": "openssl-1:1.1.1c-3.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.src", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T08:37:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0491
Vulnerability from csaf_redhat
Published
2021-02-11 13:39
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0491", "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0491.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:43+00:00", "generator": { "date": "2024-11-22T15:56:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0491", "initial_release_date": "2021-02-11T13:39:36+00:00", "revision_history": [ { "date": "2021-02-11T13:39:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:39:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1", "product": { "name": "Red Hat JBoss Web Server 3.1", "product_id": "Red Hat JBoss Web Server 3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 3.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:39:36+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 3.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0486
Vulnerability from csaf_redhat
Published
2021-02-11 13:19
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0486", "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0486.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:05+00:00", "generator": { "date": "2024-11-22T15:56:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0486", "initial_release_date": "2021-02-11T13:19:08+00:00", "revision_history": [ { "date": "2021-02-11T13:19:08+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:19:08+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-11.redhat_1.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-66.jbcs.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:19:08+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5639
Vulnerability from csaf_redhat
Published
2020-12-21 12:01
Modified
2025-03-19 15:38
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5639", "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5639.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2025-03-19T15:38:21+00:00", "generator": { "date": "2025-03-19T15:38:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.1" } }, "id": "RHSA-2020:5639", "initial_release_date": "2020-12-21T12:01:26+00:00", "revision_history": [ { "date": "2020-12-21T12:01:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:01:26+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-03-19T15:38:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.src", "product": { "name": "openssl-1:1.0.1e-52.el7_2.src", "product_id": "openssl-1:1.0.1e-52.el7_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:01:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0489
Vulnerability from csaf_redhat
Published
2021-02-11 13:38
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0489", "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "JWS-1938", "url": "https://issues.redhat.com/browse/JWS-1938" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0489.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:35+00:00", "generator": { "date": "2024-11-22T15:56:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0489", "initial_release_date": "2021-02-11T13:38:43+00:00", "revision_history": [ { "date": "2021-02-11T13:38:43+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:38:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product": { "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native-debuginfo@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:38:43+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5639
Vulnerability from csaf_redhat
Published
2020-12-21 12:01
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5639", "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5639.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:33+00:00", "generator": { "date": "2024-11-22T15:56:33+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5639", "initial_release_date": "2020-12-21T12:01:26+00:00", "revision_history": [ { "date": "2020-12-21T12:01:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:01:26+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:33+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.src", "product": { "name": "openssl-1:1.0.1e-52.el7_2.src", "product_id": "openssl-1:1.0.1e-52.el7_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:01:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5422
Vulnerability from csaf_redhat
Published
2020-12-15 09:04
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5422", "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5422.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:54+00:00", "generator": { "date": "2024-11-22T15:55:54+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5422", "initial_release_date": "2020-12-15T09:04:53+00:00", "revision_history": [ { "date": "2020-12-15T09:04:53+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T09:04:53+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:54+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.2::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.src", "product": { "name": "openssl-1:1.1.1c-16.el8_2.src", "product_id": "openssl-1:1.1.1c-16.el8_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-16.el8_2?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.src", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.aarch64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.s390x", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-16.el8_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.2)", "product_id": "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-16.el8_2.x86_64", "relates_to_product_reference": "BaseOS-8.2.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T09:04:53+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5422" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.src", "BaseOS-8.2.0.Z.EUS:openssl-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-debugsource-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-devel-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.i686", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-16.el8_2.x86_64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.aarch64", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.ppc64le", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.s390x", "BaseOS-8.2.0.Z.EUS:openssl-perl-1:1.1.1c-16.el8_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5639
Vulnerability from csaf_redhat
Published
2020-12-21 12:01
Modified
2025-03-19 15:38
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.2 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5639", "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5639.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2025-03-19T15:38:21+00:00", "generator": { "date": "2025-03-19T15:38:21+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.1" } }, "id": "RHSA-2020:5639", "initial_release_date": "2020-12-21T12:01:26+00:00", "revision_history": [ { "date": "2020-12-21T12:01:26+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:01:26+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-03-19T15:38:21+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.2::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.src", "product": { "name": "openssl-1:1.0.1e-52.el7_2.src", "product_id": "openssl-1:1.0.1e-52.el7_2.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_id": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-devel-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-libs-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_id": "openssl-static-1:1.0.1e-52.el7_2.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-52.el7_2?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.2)", "product_id": "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.src", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.i686", "relates_to_product_reference": "7Server-optional-7.2.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-52.el7_2.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.2)", "product_id": "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-52.el7_2.x86_64", "relates_to_product_reference": "7Server-optional-7.2.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:01:26+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5639" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.src", "7Server-optional-7.2.AUS:openssl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-debuginfo-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-devel-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-libs-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-perl-1:1.0.1e-52.el7_2.x86_64", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.i686", "7Server-optional-7.2.AUS:openssl-static-1:1.0.1e-52.el7_2.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5637
Vulnerability from csaf_redhat
Published
2020-12-21 08:37
Modified
2024-11-22 15:57
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.1 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5637", "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5637.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:57:07+00:00", "generator": { "date": "2024-11-22T15:57:07+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5637", "initial_release_date": "2020-12-21T08:37:06+00:00", "revision_history": [ { "date": "2020-12-21T08:37:06+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T08:37:06+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:57:07+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product": { "name": "Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:8.1::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.src", "product": { "name": "openssl-1:1.1.1c-3.el8_1.src", "product_id": "openssl-1:1.1.1c-3.el8_1.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1c-3.el8_1?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.src as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.src", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-devel-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.aarch64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.s390x", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1c-3.el8_1.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v. 8.1)", "product_id": "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" }, "product_reference": "openssl-perl-1:1.1.1c-3.el8_1.x86_64", "relates_to_product_reference": "BaseOS-8.1.0.Z.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T08:37:06+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5637" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.src", "BaseOS-8.1.0.Z.EUS:openssl-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-debugsource-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-devel-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.i686", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-libs-debuginfo-1:1.1.1c-3.el8_1.x86_64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.aarch64", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.ppc64le", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.s390x", "BaseOS-8.1.0.Z.EUS:openssl-perl-1:1.1.1c-3.el8_1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0489
Vulnerability from csaf_redhat
Published
2021-02-11 13:38
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0489", "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "JWS-1938", "url": "https://issues.redhat.com/browse/JWS-1938" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0489.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:35+00:00", "generator": { "date": "2024-11-22T15:56:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0489", "initial_release_date": "2021-02-11T13:38:43+00:00", "revision_history": [ { "date": "2021-02-11T13:38:43+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:38:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product": { "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native-debuginfo@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:38:43+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0495
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2025-04-13 01:19
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0495", "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0495.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2025-04-13T01:19:02+00:00", "generator": { "date": "2025-04-13T01:19:02+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.2" } }, "id": "RHSA-2021:0495", "initial_release_date": "2021-02-11T13:51:32+00:00", "revision_history": [ { "date": "2021-02-11T13:51:32+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:32+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-04-13T01:19:02+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5", "product": { "name": "Red Hat JBoss Web Server 5", "product_id": "Red Hat JBoss Web Server 5", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 5" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.\n\npki-servlet-engine has been obsoleted by Tomcat in Red Hat Enterprise Linux 8.9 and later. Therefore no additional fixes would be made available for the servlet engine.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
RHSA-2021:0489
Vulnerability from csaf_redhat
Published
2021-02-11 13:38
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1 for RHEL 7.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0489", "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "JWS-1938", "url": "https://issues.redhat.com/browse/JWS-1938" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0489.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:35+00:00", "generator": { "date": "2024-11-22T15:56:35+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0489", "initial_release_date": "2021-02-11T13:38:43+00:00", "revision_history": [ { "date": "2021-02-11T13:38:43+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:38:43+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:35+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product": { "name": "Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } }, { "category": "product_version", "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_id": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/tomcat-native-debuginfo@1.2.23-23.redhat_23.ep7.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" }, { "category": "default_component_of", "full_product_name": { "name": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64 as a component of Red Hat JBoss Web Server 3.1 for RHEL 7", "product_id": "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" }, "product_reference": "tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "relates_to_product_reference": "7Server-JWS-3.1" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:38:43+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0489" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.src", "7Server-JWS-3.1:tomcat-native-0:1.2.23-23.redhat_23.ep7.el7.x86_64", "7Server-JWS-3.1:tomcat-native-debuginfo-0:1.2.23-23.redhat_23.ep7.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5566
Vulnerability from csaf_redhat
Published
2020-12-16 12:43
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5566", "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5566.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:16+00:00", "generator": { "date": "2024-11-22T15:56:16+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5566", "initial_release_date": "2020-12-16T12:43:39+00:00", "revision_history": [ { "date": "2020-12-16T12:43:39+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T12:43:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:16+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.src", "product": { "name": "openssl-1:1.0.2k-21.el7_9.src", "product_id": "openssl-1:1.0.2k-21.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T12:43:39+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5642
Vulnerability from csaf_redhat
Published
2020-12-21 12:46
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5642", "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5642.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:57+00:00", "generator": { "date": "2024-11-22T15:56:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5642", "initial_release_date": "2020-12-21T12:46:04+00:00", "revision_history": [ { "date": "2020-12-21T12:46:04+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:46:04+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.src", "product": { "name": "openssl-1:1.0.2k-17.el7_6.src", "product_id": "openssl-1:1.0.2k-17.el7_6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:46:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0056
Vulnerability from csaf_redhat
Published
2021-01-11 10:34
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0056", "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0056.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:58+00:00", "generator": { "date": "2024-11-22T15:55:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0056", "initial_release_date": "2021-01-11T10:34:05+00:00", "revision_history": [ { "date": "2021-01-11T10:34:05+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-01-11T10:34:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.src", "product": { "name": "openssl-0:1.0.1e-59.el6_10.src", "product_id": "openssl-0:1.0.1e-59.el6_10.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-01-11T10:34:05+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0486
Vulnerability from csaf_redhat
Published
2021-02-11 13:19
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated packages that provide Red Hat JBoss Core Services Pack Apache Server 2.4.37 and fix several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0486", "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0486.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:05+00:00", "generator": { "date": "2024-11-22T15:56:05+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0486", "initial_release_date": "2021-02-11T13:19:08+00:00", "revision_history": [ { "date": "2021-02-11T13:19:08+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:19:08+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:05+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product": { "name": "Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1::el7" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk@1.2.48-11.redhat_1.jbcs.el7?arch=src" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-devel@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-brotli-debuginfo@1.0.6-40.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-devel@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-libs@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-perl@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-static@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-debuginfo@1.1.1g-3.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-devel@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-nghttp2-debuginfo@1.39.2-35.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-pkcs11-debuginfo@0.4.10-18.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-openssl-chil-debuginfo@1.0.0-3.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-devel@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-selinux@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-tools@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ldap@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_proxy_html@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_session@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_ssl@2.4.37-66.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-debuginfo@2.4.37-66.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_md-debuginfo@2.0.8-31.jbcs.el7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_http2-debuginfo@1.15.7-12.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_security-debuginfo@2.9.2-58.GA.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-ap24@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-manual@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_jk-debuginfo@1.2.48-11.redhat_1.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } }, { "category": "product_version", "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_id": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-mod_cluster-native-debuginfo@1.3.14-16.Final_redhat_2.jbcs.el7?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_id": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jbcs-httpd24-httpd-manual@2.4.37-66.jbcs.el7?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch" }, "product_reference": "jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" }, { "category": "default_component_of", "full_product_name": { "name": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64 as a component of Red Hat JBoss Core Services on RHEL 7 Server", "product_id": "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" }, "product_reference": "jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64", "relates_to_product_reference": "7Server-JBCS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:19:08+00:00", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0486" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-brotli-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-debuginfo-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-brotli-devel-0:1.0.6-40.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-httpd-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-debuginfo-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-devel-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-manual-0:2.4.37-66.jbcs.el7.noarch", "7Server-JBCS:jbcs-httpd24-httpd-selinux-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-httpd-tools-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_cluster-native-debuginfo-0:1.3.14-16.Final_redhat_2.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_http2-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_http2-debuginfo-0:1.15.7-12.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-0:1.2.48-11.redhat_1.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_jk-ap24-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-debuginfo-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_jk-manual-0:1.2.48-11.redhat_1.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ldap-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_md-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_md-debuginfo-1:2.0.8-31.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_proxy_html-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-mod_security-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_security-debuginfo-0:2.9.2-58.GA.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_session-0:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-mod_ssl-1:2.4.37-66.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-nghttp2-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-debuginfo-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-nghttp2-devel-0:1.39.2-35.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-chil-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-chil-debuginfo-0:1.0.0-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-debuginfo-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-devel-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-libs-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-perl-1:1.1.1g-3.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.src", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-pkcs11-debuginfo-0:0.4.10-18.jbcs.el7.x86_64", "7Server-JBCS:jbcs-httpd24-openssl-static-1:1.1.1g-3.jbcs.el7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5641
Vulnerability from csaf_redhat
Published
2020-12-21 12:21
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5641", "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5641.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:49+00:00", "generator": { "date": "2024-11-22T15:56:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5641", "initial_release_date": "2020-12-21T12:21:57+00:00", "revision_history": [ { "date": "2020-12-21T12:21:57+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:21:57+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.src", "product": { "name": "openssl-1:1.0.2k-9.el7_4.src", "product_id": "openssl-1:1.0.2k-9.el7_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:21:57+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5640
Vulnerability from csaf_redhat
Published
2020-12-21 12:07
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.3 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5640", "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5640.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:42+00:00", "generator": { "date": "2024-11-22T15:56:42+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5640", "initial_release_date": "2020-12-21T12:07:09+00:00", "revision_history": [ { "date": "2020-12-21T12:07:09+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:07:09+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:42+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.3::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.src", "product": { "name": "openssl-1:1.0.1e-61.el7_3.src", "product_id": "openssl-1:1.0.1e-61.el7_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_id": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-devel-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-libs-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_id": "openssl-static-1:1.0.1e-61.el7_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-61.el7_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.3)", "product_id": "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.src", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-devel-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-libs-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-perl-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.i686", "relates_to_product_reference": "7Server-optional-7.3.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.1e-61.el7_3.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.3)", "product_id": "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" }, "product_reference": "openssl-static-1:1.0.1e-61.el7_3.x86_64", "relates_to_product_reference": "7Server-optional-7.3.AUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:07:09+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5640" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.src", "7Server-optional-7.3.AUS:openssl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-debuginfo-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-devel-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-libs-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-perl-1:1.0.1e-61.el7_3.x86_64", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.i686", "7Server-optional-7.3.AUS:openssl-static-1:1.0.1e-61.el7_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5641
Vulnerability from csaf_redhat
Published
2020-12-21 12:21
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5641", "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5641.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:49+00:00", "generator": { "date": "2024-11-22T15:56:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5641", "initial_release_date": "2020-12-21T12:21:57+00:00", "revision_history": [ { "date": "2020-12-21T12:21:57+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:21:57+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.src", "product": { "name": "openssl-1:1.0.2k-9.el7_4.src", "product_id": "openssl-1:1.0.2k-9.el7_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:21:57+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0488
Vulnerability from csaf_redhat
Published
2021-02-11 13:29
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0488", "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0488.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:13+00:00", "generator": { "date": "2024-11-22T15:56:13+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0488", "initial_release_date": "2021-02-11T13:29:52+00:00", "revision_history": [ { "date": "2021-02-11T13:29:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:29:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:13+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "JBCS 2.4.37 SP6", "product": { "name": "JBCS 2.4.37 SP6", "product_id": "JBCS 2.4.37 SP6", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "JBCS 2.4.37 SP6" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:29:52+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "JBCS 2.4.37 SP6" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "JBCS 2.4.37 SP6" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "JBCS 2.4.37 SP6" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0495
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements, and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0495", "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=webserver\u0026downloadType=securityPatches\u0026version=5.4" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/5.4/" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0495.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2024-11-22T15:56:29+00:00", "generator": { "date": "2024-11-22T15:56:29+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0495", "initial_release_date": "2021-02-11T13:51:32+00:00", "revision_history": [ { "date": "2021-02-11T13:51:32+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:32+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:29+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5", "product": { "name": "Red Hat JBoss Web Server 5", "product_id": "Red Hat JBoss Web Server 5", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 5" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 5" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:32+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 5" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0495" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 5" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
rhsa-2020_5642
Vulnerability from csaf_redhat
Published
2020-12-21 12:46
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5642", "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5642.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:57+00:00", "generator": { "date": "2024-11-22T15:56:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5642", "initial_release_date": "2020-12-21T12:46:04+00:00", "revision_history": [ { "date": "2020-12-21T12:46:04+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:46:04+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.src", "product": { "name": "openssl-1:1.0.2k-17.el7_6.src", "product_id": "openssl-1:1.0.2k-17.el7_6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:46:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5476
Vulnerability from csaf_redhat
Published
2020-12-15 17:22
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security and bug fix update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)
* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)\n\n* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5476", "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5476.json" } ], "title": "Red Hat Security Advisory: openssl security and bug fix update", "tracking": { "current_release_date": "2024-11-22T15:56:01+00:00", "generator": { "date": "2024-11-22T15:56:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5476", "initial_release_date": "2020-12-15T17:22:46+00:00", "revision_history": [ { "date": "2020-12-15T17:22:46+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T17:22:46+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.src", "product": { "name": "openssl-1:1.1.1g-12.el8_3.src", "product_id": "openssl-1:1.1.1g-12.el8_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.src", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T17:22:46+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0488
Vulnerability from csaf_redhat
Published
2021-02-11 13:29
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0488", "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0488.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:13+00:00", "generator": { "date": "2024-11-22T15:56:13+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0488", "initial_release_date": "2021-02-11T13:29:52+00:00", "revision_history": [ { "date": "2021-02-11T13:29:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:29:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:13+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "JBCS 2.4.37 SP6", "product": { "name": "JBCS 2.4.37 SP6", "product_id": "JBCS 2.4.37 SP6", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "JBCS 2.4.37 SP6" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:29:52+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "JBCS 2.4.37 SP6" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "JBCS 2.4.37 SP6" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "JBCS 2.4.37 SP6" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5588
Vulnerability from csaf_redhat
Published
2020-12-16 15:15
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5588", "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5588.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:09+00:00", "generator": { "date": "2024-11-22T15:56:09+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5588", "initial_release_date": "2020-12-16T15:15:01+00:00", "revision_history": [ { "date": "2020-12-16T15:15:01+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T15:15:01+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:09+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product": { "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:8.0::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.src", "product": { "name": "openssl-1:1.1.1-9.el8_0.src", "product_id": "openssl-1:1.1.1-9.el8_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_id": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src" }, "product_reference": "openssl-1:1.1.1-9.el8_0.src", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T15:15:01+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0494
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2025-04-13 01:18
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0494", "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0494.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2025-04-13T01:18:53+00:00", "generator": { "date": "2025-04-13T01:18:53+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.4.2" } }, "id": "RHSA-2021:0494", "initial_release_date": "2021-02-11T13:51:48+00:00", "revision_history": [ { "date": "2021-02-11T13:51:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2025-04-13T01:18:53+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el7" } } }, { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el8" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.\n\npki-servlet-engine has been obsoleted by Tomcat in Red Hat Enterprise Linux 8.9 and later. Therefore no additional fixes would be made available for the servlet engine.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
rhsa-2021_0949
Vulnerability from csaf_redhat
Published
2021-03-22 10:10
Modified
2024-11-22 16:18
Summary
Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update
Notes
Topic
Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.
Details
Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,
build, and deploy applications on OpenShift. The odo tool is completely
client-based and requires no server within the OpenShift cluster for
deployment. It detects changes to local code and deploys it to the cluster
automatically, giving instant feedback to validate changes in real-time. It
supports multiple programming languages and frameworks.
Red Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image
that is used as part of the InitContainer setup that provisions odo
components.
The advisory addresses the following issues:
* Re-release of odo-init-image 1.1.3 for security updates
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated openshift/odo-init-image container image is now available for Red Hat Openshift Do 1.0.", "title": "Topic" }, { "category": "general", "text": "Red Hat OpenShift Do (odo) is a simple CLI tool for developers to create,\nbuild, and deploy applications on OpenShift. The odo tool is completely\nclient-based and requires no server within the OpenShift cluster for\ndeployment. It detects changes to local code and deploys it to the cluster\nautomatically, giving instant feedback to validate changes in real-time. It\nsupports multiple programming languages and frameworks.\n\nRed Hat OpenShift Do openshift/odo-init-image 1.1.3 is a container image\nthat is used as part of the InitContainer setup that provisions odo\ncomponents.\n\nThe advisory addresses the following issues:\n\n* Re-release of odo-init-image 1.1.3 for security updates", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0949", "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html", "url": "https://docs.openshift.com/container-platform/4.4/cli_reference/openshift_developer_cli/installing-odo.html" }, { "category": "external", "summary": "1832983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1832983" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0949.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Do openshift/odo-init-image 1.1.3 security update", "tracking": { "current_release_date": "2024-11-22T16:18:07+00:00", "generator": { "date": "2024-11-22T16:18:07+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0949", "initial_release_date": "2021-03-22T10:10:55+00:00", "revision_history": [ { "date": "2021-03-22T10:10:55+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-03-22T10:10:55+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T16:18:07+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "OpenShift Do 1", "product": { "name": "OpenShift Do 1", "product_id": "7Server-RHODO-1", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_do:1.0::el7" } } } ], "category": "product_family", "name": "OpenShift Do" }, { "branches": [ { "category": "product_version", "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_id": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "product_identification_helper": { "purl": "pkg:oci/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96?arch=amd64\u0026repository_url=registry.redhat.io/openshiftdo/odo-init-image-rhel7\u0026tag=1.1.3-2" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64 as a component of OpenShift Do 1", "product_id": "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" }, "product_reference": "openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64", "relates_to_product_reference": "7Server-RHODO-1" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-20843", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-06-24T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1723723" } ], "notes": [ { "category": "description", "text": "It was discovered that the \"setElementTypePrefix()\" function incorrectly extracted XML namespace prefixes. By tricking an application into processing a specially crafted XML file, an attacker could cause unusually high consumption of memory resources and possibly lead to a denial of service.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS", "title": "Vulnerability summary" }, { "category": "other", "text": "When processing a specially crafted XML file, expat may use more memory than ultimately necessary, which can also lead to increased CPU usage and longer processing times. Depending on available system resources and configuration, this may also lead to the application triggering the Out-Of-Memory-Killer, causing the application to be terminated.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2018-20843" }, { "category": "external", "summary": "RHBZ#1723723", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723723" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2018-20843", "url": "https://www.cve.org/CVERecord?id=CVE-2018-20843" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-20843" }, { "category": "external", "summary": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031", "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931031" } ], "release_date": "2019-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "expat: large number of colons in input makes parser consume high amount of resources, leading to DoS" }, { "cve": "CVE-2019-5094", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2019-11-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1768555" } ], "notes": [ { "category": "description", "text": "An exploitable code execution vulnerability exists in the quota file functionality of E2fsprogs 1.45.3. A specially crafted ext4 partition can cause an out-of-bounds write on the heap, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5094" }, { "category": "external", "summary": "RHBZ#1768555", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1768555" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5094", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5094" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5094" }, { "category": "external", "summary": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887", "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2019-0887" } ], "release_date": "2019-08-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Crafted ext4 partition leads to out-of-bounds write" }, { "cve": "CVE-2019-5188", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "discovery_date": "2020-01-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1790048" } ], "notes": [ { "category": "description", "text": "A code execution vulnerability exists in the directory rehashing functionality of E2fsprogs e2fsck 1.45.4. A specially crafted ext4 directory can cause an out-of-bounds write on the stack, resulting in code execution. An attacker can corrupt a partition to trigger this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5188" }, { "category": "external", "summary": "RHBZ#1790048", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1790048" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5188", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5188" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5188" } ], "release_date": "2020-01-07T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "e2fsprogs: Out-of-bounds write in e2fsck/rehash.c" }, { "acknowledgments": [ { "names": [ "the Curl project" ] }, { "names": [ "Thomas Vegas" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-5482", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-09-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1749652" } ], "notes": [ { "category": "description", "text": "Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: heap buffer overflow in function tftp_receive_packet()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-5482" }, { "category": "external", "summary": "RHBZ#1749652", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1749652" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-5482", "url": "https://www.cve.org/CVERecord?id=CVE-2019-5482" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5482" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2019-5482.html", "url": "https://curl.haxx.se/docs/CVE-2019-5482.html" } ], "release_date": "2019-09-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Do not use TFTP with curl with smaller than the default BLKSIZE.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: heap buffer overflow in function tftp_receive_packet()" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Henry Corrigan-Gibbs" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11719", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-07-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1728436" } ], "notes": [ { "category": "description", "text": "When importing a curve25519 private key in PKCS#8format with leading 0x00 bytes, it is possible to trigger an out-of-bounds read in the Network Security Services (NSS) library. This could lead to information disclosure. This vulnerability affects Firefox ESR \u003c 60.8, Firefox \u003c 68, and Thunderbird \u003c 60.8.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Out-of-bounds read when importing curve25519 private key", "title": "Vulnerability summary" }, { "category": "other", "text": "Firefox on Red Hat Enterprise Linux is built against the system nss library.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11719" }, { "category": "external", "summary": "RHBZ#1728436", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1728436" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11719", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11719" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11719" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-22/#CVE-2019-11719" } ], "release_date": "2019-07-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Out-of-bounds read when importing curve25519 private key" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] }, { "names": [ "Hubert Kario" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-11727", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2019-07-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1730988" } ], "notes": [ { "category": "description", "text": "A vulnerability exists where it possible to force Network Security Services (NSS) to sign CertificateVerify with PKCS#1 v1.5 signatures when those are the only ones advertised by server in CertificateRequest in TLS 1.3. PKCS#1 v1.5 signatures should not be used for TLS 1.3 messages. This vulnerability affects Firefox \u003c 68.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11727" }, { "category": "external", "summary": "RHBZ#1730988", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1730988" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11727", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11727" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11727" }, { "category": "external", "summary": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727", "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2019-21/#CVE-2019-11727" } ], "release_date": "2019-07-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.4, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: PKCS#1 v1.5 signatures can be used for TLS 1.3" }, { "acknowledgments": [ { "names": [ "the Mozilla project" ] } ], "cve": "CVE-2019-11756", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "discovery_date": "2019-11-21T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774835" } ], "notes": [ { "category": "description", "text": "A use-after-free flaw was found in Mozilla Network Security Services (NSS) related to PK11 session handling. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled with NSS.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Use-after-free in sftk_FreeSession due to improper refcounting", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw was fixed in upstream nss-3.47. Exploitation of this flaw is difficult and even impossible in most cases.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-11756" }, { "category": "external", "summary": "RHBZ#1774835", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774835" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-11756", "url": "https://www.cve.org/CVERecord?id=CVE-2019-11756" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-11756" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.47_release_notes" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Use-after-free in sftk_FreeSession due to improper refcounting" }, { "cve": "CVE-2019-12450", "cwe": { "id": "CWE-552", "name": "Files or Directories Accessible to External Parties" }, "discovery_date": "2019-06-10T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719141" } ], "notes": [ { "category": "description", "text": "file_copy_fallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used.", "title": "Vulnerability description" }, { "category": "summary", "text": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue affects the versions of glib2 as shipped with Red Hat Enterprise Linux 6, 7 and 8 . Red Hat Product Security has rated this issue as having a security impact of Moderate.\n\nRed Hat Enterprise Linux 6 is now in Maintenance Support 2 Phase of the support and maintenance life cycle. This has been rated as having a security impact of Important, and is not currently planned to be addressed in future updates. For additional information, refer to the Red Hat Enterprise Linux Life Cycle: https://access.redhat.com/support/policy/updates/errata/.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12450" }, { "category": "external", "summary": "RHBZ#1719141", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719141" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12450", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12450" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12450" } ], "release_date": "2019-05-23T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress" }, { "acknowledgments": [ { "names": [ "the D-Bus project" ] }, { "names": [ "Joe Vennix" ], "organization": "Apple Information Security", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2019-12749", "cwe": { "id": "CWE-287", "name": "Improper Authentication" }, "discovery_date": "2019-06-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1719344" } ], "notes": [ { "category": "description", "text": "A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause the DBusServer to read and write in unintended locations resulting in an authentication bypass. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw is mitigated by the fact that by default, the well-known system dbus-daemon (since 2003) and the well-known session dbus-daemon (in stable releases since dbus 1.10.0 in 2015) only accept the EXTERNAL authentication mechanism, and as a result will reject DBUS_COOKIE_SHA1 at an early stage, before manipulating cookies. \n\nRed Hat Enterprise Linux 6 is affected by this flaw, which can be leveraged to achieve privilege escalation via upstart. This issue has been rated as having important impact for Red Hat Enterprise Linux 6.\n\nRed Hat Enterprise Linux 7 and 8, both ship dbus \u003e= 1.10 and therefore are affected by this flaw only when system or session dbus-daemons are used under non-standard configurations or by third party users of DBusServer. Red Hat Enterprise Linux 7 and 8 does not ship any affected DBusServer cosumer. However third party applications may be affected.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-12749" }, { "category": "external", "summary": "RHBZ#1719344", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1719344" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-12749", "url": "https://www.cve.org/CVERecord?id=CVE-2019-12749" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-12749" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2019/06/11/2", "url": "https://www.openwall.com/lists/oss-security/2019/06/11/2" } ], "release_date": "2019-06-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass" }, { "acknowledgments": [ { "names": [ "Simon McVittie" ], "organization": "Collabora Ltd." } ], "cve": "CVE-2019-14822", "cwe": { "id": "CWE-862", "name": "Missing Authorization" }, "discovery_date": "2019-06-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1717958" } ], "notes": [ { "category": "description", "text": "A flaw was discovered in ibus that allows any unprivileged user to monitor and send method calls to the ibus bus of another user due to a misconfiguration in the DBus server setup. A local attacker may use this flaw to intercept all keystrokes of a victim user who is using the graphical interface, change the input method engine, or modify other input related configurations of the victim user.", "title": "Vulnerability description" }, { "category": "summary", "text": "ibus: missing authorization allows local attacker to access the input bus of another user", "title": "Vulnerability summary" }, { "category": "other", "text": "Gnome uses the ibus input framework only when the user explicitly configures it or when some input method sources are in use, like Korean from the ibus-hangul package or Chinese input methods from the ibus-libpinyin. Input methods like en-US are not handled by ibus, thus if the victim user just use them the attacker will not be able to intercept the key strokes of that user.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14822" }, { "category": "external", "summary": "RHBZ#1717958", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1717958" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14822", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14822" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14822" } ], "release_date": "2019-09-13T07:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "ibus: missing authorization allows local attacker to access the input bus of another user" }, { "acknowledgments": [ { "names": [ "Thomas Habets" ] } ], "cve": "CVE-2019-14866", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-10-25T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1765511" } ], "notes": [ { "category": "description", "text": "It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to. Extracting those archives from a high-privilege user without carefully reviewing them may lead to the compromise of the system.", "title": "Vulnerability description" }, { "category": "summary", "text": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-14866" }, { "category": "external", "summary": "RHBZ#1765511", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1765511" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-14866", "url": "https://www.cve.org/CVERecord?id=CVE-2019-14866" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-14866" } ], "release_date": "2019-08-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "TAR archives should be inspected before being extracted and the extraction should be performed with the `tar` command or `--no-absolute-filenames` option if done with `cpio`. Moreover, it should be performed by a low-privilege user whenever possible, to prevent extraction of files that could compromise the system.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "cpio: improper input validation when writing tar header fields leads to unexpected tar generation" }, { "cve": "CVE-2019-15903", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2019-09-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1752592" } ], "notes": [ { "category": "description", "text": "In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to document parsing too early; a consecutive call to XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber) then resulted in a heap-based buffer over-read.", "title": "Vulnerability description" }, { "category": "summary", "text": "expat: heap-based buffer over-read via crafted XML input", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-15903" }, { "category": "external", "summary": "RHBZ#1752592", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1752592" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-15903", "url": "https://www.cve.org/CVERecord?id=CVE-2019-15903" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-15903" } ], "release_date": "2019-09-04T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "expat: heap-based buffer over-read via crafted XML input" }, { "cve": "CVE-2019-16935", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2019-09-27T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1763229" } ], "notes": [ { "category": "description", "text": "A reflected cross-site scripting (XSS) vulnerability was found in Python XML-RPC server. The `server_title` field is not sufficiently sanitized allowing malicious JavaScript to be injected. Successful exploitation would allow a remote attacker to execute JavaScript code within the context of the affected user.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: XSS vulnerability in the documentation XML-RPC server in server_title field", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw does not affect the versions of python27-python as shipped with Red Hat Software Collections 3 as they already include the fix.\nThis flaw does not affect the versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 as they are \"symlinks\" to the main python3 component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-16935" }, { "category": "external", "summary": "RHBZ#1763229", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1763229" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-16935", "url": "https://www.cve.org/CVERecord?id=CVE-2019-16935" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-16935" } ], "release_date": "2019-09-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: XSS vulnerability in the documentation XML-RPC server in server_title field" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2019-17006", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "discovery_date": "2019-11-23T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1775916" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in nss where input text length was not checked when using certain cryptographic primitives. This could lead to a heap-buffer overflow resulting in a crash and data leak. The highest threat is to confidentiality and integrity of data as well as system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Check length of inputs for cryptographic primitives", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17006" }, { "category": "external", "summary": "RHBZ#1775916", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1775916" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17006", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17006" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17006" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.46_release_notes" } ], "release_date": "2019-12-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Check length of inputs for cryptographic primitives" }, { "cve": "CVE-2019-17023", "discovery_date": "2020-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1791225" } ], "notes": [ { "category": "description", "text": "A protocol downgrade flaw was found in Network Security Services (NSS). After a HelloRetryRequest has been sent, the client may negotiate a lower protocol than TLS 1.3, resulting in an invalid state transition in the TLS State Machine. If the client gets into this state, incoming Application Data records will be ignored.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw causes the client to hang when there is a downgrade attempt. Therefore no actual protocol downgrade occurs.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17023" }, { "category": "external", "summary": "RHBZ#1791225", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1791225" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17023", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17023" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17023" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state" }, { "cve": "CVE-2019-17498", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2019-10-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1766898" } ], "notes": [ { "category": "description", "text": "In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds check, enabling an attacker to specify an arbitrary (out-of-bounds) offset for a subsequent memory read. A crafted SSH server may be able to disclose sensitive information or cause a denial of service condition on the client system when a user connects to the server.", "title": "Vulnerability description" }, { "category": "summary", "text": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw needs a malicious MITM SSH server. When an application compiled with libssh2 connects to such a MITM SSH server, the server can trigger an integer overflow leading to an OOB read in the SSH_MSG_DISCONNECT logic. This can cause the application compiled with libssh2 to crash. This is strictly a client side crash and the SSH server may not be affected.\n\nAlso note that when a user connects to a malicious MITM server there is already a risk of disclosing password/keys irrespective of the flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-17498" }, { "category": "external", "summary": "RHBZ#1766898", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1766898" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-17498", "url": "https://www.cve.org/CVERecord?id=CVE-2019-17498" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-17498" }, { "category": "external", "summary": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/", "url": "https://blog.semmle.com/libssh2-integer-overflow-CVE-2019-17498/" } ], "release_date": "2019-10-16T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c" }, { "cve": "CVE-2019-19126", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "discovery_date": "2019-11-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1774681" } ], "notes": [ { "category": "description", "text": "A vulnerability was discovered in glibc where the LD_PREFER_MAP_32BIT_EXEC environment variable is not ignored when running binaries with the setuid flag on x86_64 architectures. This allows an attacker to force system to utilize only half of the memory (making the system think the software is 32-bit only), thus lowering the amount of memory being used with address space layout randomization (ASLR). The highest threat is confidentiality although the complexity of attack is high. The affected application must already have other vulnerabilities for this flaw to be usable.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19126" }, { "category": "external", "summary": "RHBZ#1774681", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1774681" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19126", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19126" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19126" } ], "release_date": "2019-11-19T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 2.9, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries" }, { "cve": "CVE-2019-19956", "cwe": { "id": "CWE-772", "name": "Missing Release of Resource after Effective Lifetime" }, "discovery_date": "2020-01-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1788856" } ], "notes": [ { "category": "description", "text": "xmlParseBalancedChunkMemoryRecover in parser.c in libxml2 before 2.9.10 has a memory leak related to newDoc-\u003eoldNs.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-19956" }, { "category": "external", "summary": "RHBZ#1788856", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1788856" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-19956", "url": "https://www.cve.org/CVERecord?id=CVE-2019-19956" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-19956" } ], "release_date": "2020-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c" }, { "cve": "CVE-2019-20386", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-01-22T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1793979" } ], "notes": [ { "category": "description", "text": "A memory leak was discovered in the systemd-login when a power-switch event is received. A physical attacker may trigger one of these events and leak bytes due to a missing free.", "title": "Vulnerability description" }, { "category": "summary", "text": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received", "title": "Vulnerability summary" }, { "category": "other", "text": "The version of systemd delivered in OpenShift Container Platform 4.1 and included in CoreOS images has been superseded by the version delivered in Red Hat Enterprise Linux 8. CoreOS updates for systemd in will be consumed from Red Hat Enterprise Linux 8 channels.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20386" }, { "category": "external", "summary": "RHBZ#1793979", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1793979" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20386", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20386" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20386" } ], "release_date": "2020-01-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "PHYSICAL", "availabilityImpact": "LOW", "baseScore": 2.4, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "systemd: memory leak in button_open() in login/logind-button.c when udev events are received" }, { "cve": "CVE-2019-20388", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799734" } ], "notes": [ { "category": "description", "text": "A memory leak was found in the xmlSchemaValidateStream function of libxml2. Applications that use this library may be vulnerable to memory not being freed leading to a denial of service. System availability is the highest threat from this vulnerability.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20388" }, { "category": "external", "summary": "RHBZ#1799734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20388", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20388" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20388" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c" }, { "cve": "CVE-2019-20907", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-07-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1856481" } ], "notes": [ { "category": "description", "text": "A flaw was found in python. In Lib/tarfile.py an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.", "title": "Vulnerability description" }, { "category": "summary", "text": "python: infinite loop in the tarfile module via crafted TAR archive", "title": "Vulnerability summary" }, { "category": "other", "text": "A service is vulnerable if it uses python\u0027s tarfile module to open untrusted tar files. If an attacker is able to submit a crafted tar file to a service which uses the tarfile module to open it, an infinite loop will be executed, potentially causing a denial of service. The tarfile module is included with python.\n\nVersions of `python36:3.6/python36` as shipped with Red Hat Enterprise Linux 8 are marked as \u0027Not affected\u0027 as they just provide \"symlinks\" to the main `python3` component, which provides the actual interpreter of the Python programming language.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-20907" }, { "category": "external", "summary": "RHBZ#1856481", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1856481" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-20907", "url": "https://www.cve.org/CVERecord?id=CVE-2019-20907" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-20907" } ], "release_date": "2019-12-10T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This flaw can be mitigated by not opening untrusted files with tarfile.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "python: infinite loop in the tarfile module via crafted TAR archive" }, { "cve": "CVE-2019-25013", "cwe": { "id": "CWE-119", "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer" }, "discovery_date": "2021-01-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1912960" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc. When processing input in the EUC-KR encoding, an invalid input sequence could cause glibc to read beyond the end of a buffer, resulting in a segmentation fault. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding", "title": "Vulnerability summary" }, { "category": "other", "text": "This flaw has been rated as having moderate impact for glibc packages shipped with Red Hat Enterprise Linux because, the maximum impact of this vulnerability is a crash, and it relies on processing untrusted input in an uncommon encoding (EUC-KR). When this encoding is not used, the vulnerability can not be triggered.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2019-25013" }, { "category": "external", "summary": "RHBZ#1912960", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1912960" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2019-25013", "url": "https://www.cve.org/CVERecord?id=CVE-2019-25013" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-25013" } ], "release_date": "2019-09-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 4.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding" }, { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom", "Billy Bob Brumley" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-6829", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826187" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel attack on ECDSA signature generation", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-6829" }, { "category": "external", "summary": "RHBZ#1826187", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826187" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-6829", "url": "https://www.cve.org/CVERecord?id=CVE-2020-6829" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-6829" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel attack on ECDSA signature generation" }, { "cve": "CVE-2020-7595", "cwe": { "id": "CWE-835", "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)" }, "discovery_date": "2020-02-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1799786" } ], "notes": [ { "category": "description", "text": "xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation.", "title": "Vulnerability description" }, { "category": "summary", "text": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-7595" }, { "category": "external", "summary": "RHBZ#1799786", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1799786" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-7595", "url": "https://www.cve.org/CVERecord?id=CVE-2020-7595" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-7595" } ], "release_date": "2020-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations" }, { "cve": "CVE-2020-8177", "discovery_date": "2020-06-17T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1847915" } ], "notes": [ { "category": "description", "text": "A flaw was found in curl. Overwriting local files is possible when using a certain combination of command line options. Requesting content from a malicious server could lead to overwriting local files with compromised files leading to unknown effects. The highest threat from this vulnerability is to file integrity.", "title": "Vulnerability description" }, { "category": "summary", "text": "curl: Incorrect argument check can allow remote servers to overwrite local files", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue only affects the \u0027curl\u0027 command line utility. Additionally, this is only an issue when using the \u0027-J\u0027 (with the \u0027-O\u0027 option) and \u0027-i\u0027 command line options combined.\n\nIn most cases, there is nothing to gain for a local attacker here: the curl command line utility is likely running with the same privileges as the user, and thus the user can already overwrite all the files curl could overwrite. However, a local user will have to call curl with the \u0027-J\u0027 and \u0027-i\u0027 command line options while requesting content from a malicious server, which then opens up an opportunity for the malicious server to overwrite local files.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-8177" }, { "category": "external", "summary": "RHBZ#1847915", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1847915" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-8177", "url": "https://www.cve.org/CVERecord?id=CVE-2020-8177" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8177" }, { "category": "external", "summary": "https://curl.haxx.se/docs/CVE-2020-8177.html", "url": "https://curl.haxx.se/docs/CVE-2020-8177.html" } ], "release_date": "2020-06-24T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "The vulnerability is only possible when using the \u0027-J\u0027 and \u0027-i\u0027 switches in conjunction with the curl command. Executing curl without these switches mitigates the flaw.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:L", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "curl: Incorrect argument check can allow remote servers to overwrite local files" }, { "cve": "CVE-2020-10029", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-03-04T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1810670" } ], "notes": [ { "category": "description", "text": "A flaw was found in glibc in versions prior to 2.32. Pseudo-zero values are not validated causing a stack corruption due to a stack-based overflow. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions", "title": "Vulnerability summary" }, { "category": "other", "text": "The glibc version shipped with Red Hat Enterprise Linux 8 is compiled using gcc\u0027s stack-protector option which mitigates the possibility of code execution led by the stack corruption.\n\nThe glibc version shipped with Red Hat Enterprise Linux 7 is more difficult to exploit using this flaw, specifically for remote code execution. Because exploitation of the flaw depends on the usage of pseudo-zero values, an attacker can only overwrite the stack with 0s. Due to this, a valid address value for code execution is difficult to get and is likely to only result in a crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-10029" }, { "category": "external", "summary": "RHBZ#1810670", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1810670" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-10029", "url": "https://www.cve.org/CVERecord?id=CVE-2020-10029" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-10029" } ], "release_date": "2020-02-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions" }, { "cve": "CVE-2020-12243", "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "discovery_date": "2020-04-28T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1833535" } ], "notes": [ { "category": "description", "text": "In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).", "title": "Vulnerability description" }, { "category": "summary", "text": "openldap: denial of service via nested boolean expressions in LDAP search filters", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue does not affect Red Hat Enterprise Linux 8 because we don\u0027t ship openldap-servers subpackage with the Red Hat Enterprise Linux 8 (it is only present in the buildroot).", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12243" }, { "category": "external", "summary": "RHBZ#1833535", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1833535" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12243", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12243" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12243" } ], "release_date": "2020-04-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "openldap: denial of service via nested boolean expressions in LDAP search filters" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12400", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-07-06T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1853983" } ], "notes": [ { "category": "description", "text": "A side-channel flaw was found in NSS, in the way P-384 and P-521 curves are used in the generation of EDSA signatures, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side-channel attack that can be used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12400" }, { "category": "external", "summary": "RHBZ#1853983", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1853983" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12400", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12400" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12400" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Cesar Pereida Garcia and the Network and Information Security Group" ], "organization": "NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12401", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-06-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1851294" } ], "notes": [ { "category": "description", "text": "A flaw was found in nss. Using the EM side-channel, it is possible to extract the position of zero and non-zero wNAF digits while nss-certutil tool performs scalar multiplication during the ECDSA signature generation, leaking partial information about the ECDSA nonce. Given a small number of ECDSA signatures, this information can be used to steal the private key. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: ECDSA timing attack mitigation bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12401" }, { "category": "external", "summary": "RHBZ#1851294", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1851294" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12401", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12401" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12401" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-06-30T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "This is a side channel attack which can used to exact pirate keys when ECDSA signatures are being generated. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: ECDSA timing attack mitigation bypass" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] }, { "names": [ "Billy Bob Brumley", "Cesar Pereida", "Nicola Tuveri", "Yuval Yarom" ], "organization": "Network and Information Security Group (NISEC", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-12402", "cwe": { "id": "CWE-327", "name": "Use of a Broken or Risky Cryptographic Algorithm" }, "discovery_date": "2020-04-20T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1826231" } ], "notes": [ { "category": "description", "text": "A flaw was found in NSS, where it is vulnerable to RSA key generation cache timing side-channel attacks. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. The highest threat to this flaw is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: Side channel vulnerabilities during RSA key generation", "title": "Vulnerability summary" }, { "category": "other", "text": "A timing attack was found in the way NSS generated RSA keys. A man-in-the-middle attacker could use this attack during RSA key generation to recover the private key. This attack is only feasible when the attacker is local to the machine or in certain cross-VM scenarios where the signature is being generated. Attacks over the network or via the internet are not feasible.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12402" }, { "category": "external", "summary": "RHBZ#1826231", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1826231" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12402", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12402" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12402" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.53.1_release_notes" } ], "release_date": "2020-06-02T12:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: Side channel vulnerabilities during RSA key generation" }, { "acknowledgments": [ { "names": [ "the Mozilla Project" ] } ], "cve": "CVE-2020-12403", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "discovery_date": "2020-08-14T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1868931" } ], "notes": [ { "category": "description", "text": "A flaw was found in the way CHACHA20-POLY1305 was implemented in NSS. When using multi-part Chacha20, it could cause out-of-bounds reads. This issue was fixed by explicitly disabling multi-part ChaCha20 (which was not functioning correctly) and strictly enforcing tag length. The highest threat from this vulnerability is to confidentiality and system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-12403" }, { "category": "external", "summary": "RHBZ#1868931", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1868931" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-12403", "url": "https://www.cve.org/CVERecord?id=CVE-2020-12403" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-12403" }, { "category": "external", "summary": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes", "url": "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.55_release_notes" } ], "release_date": "2020-07-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read" }, { "cve": "CVE-2020-29573", "cwe": { "id": "CWE-121", "name": "Stack-based Buffer Overflow" }, "discovery_date": "2020-12-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1905213" } ], "notes": [ { "category": "description", "text": "A stack buffer overflow flaw was found in glibc in the way the printf family of functions processed an 80-bit long double with a non-canonical bit pattern. This flaw allows an attacker who can control the arguments of these functions with the non-standard long double pattern to trigger an overflow and cause an application crash. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern", "title": "Vulnerability summary" }, { "category": "other", "text": "This is essentially a crash which can only be triggered by a non-standard argument passed as a long double input to a member of printf family of functions. The application has to be written in this way to allow this issue to be triggered. The maximum impact is an application crash.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-29573" }, { "category": "external", "summary": "RHBZ#1905213", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1905213" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-29573", "url": "https://www.cve.org/CVERecord?id=CVE-2020-29573" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-29573" }, { "category": "external", "summary": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html", "url": "https://sourceware.org/pipermail/libc-alpha/2020-September/117779.html" } ], "release_date": "2020-09-22T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-03-22T10:10:55+00:00", "details": "Download and install a new CLI binary by following the instructions linked from the References section.", "product_ids": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0949" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-RHODO-1:openshiftdo/odo-init-image-rhel7@sha256:83eea230500106cf84b287fb7249be475171c8ff9ced7025cbf628a213cb9d96_amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern" } ] }
rhsa-2020_5566
Vulnerability from csaf_redhat
Published
2020-12-16 12:43
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5566", "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5566.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:16+00:00", "generator": { "date": "2024-11-22T15:56:16+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5566", "initial_release_date": "2020-12-16T12:43:39+00:00", "revision_history": [ { "date": "2020-12-16T12:43:39+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T12:43:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:16+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.src", "product": { "name": "openssl-1:1.0.2k-21.el7_9.src", "product_id": "openssl-1:1.0.2k-21.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T12:43:39+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021_0494
Vulnerability from csaf_redhat
Published
2021-02-11 13:51
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update
Notes
Topic
Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.
Security Fix(es):
* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)
* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)
* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 5.4.1 serves as a replacement for Red Hat JBoss Web Server 5.4.0, and includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes, linked to in the References.\n\nSecurity Fix(es):\n\n* tomcat: Apache Tomcat HTTP/2 Request mix-up (CVE-2020-13943)\n* tomcat: HTTP/2 request header mix-up (CVE-2020-17527)\n* tomcat: Information disclosure when using NTFS file system (CVE-2021-24122)\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0494", "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0494.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update", "tracking": { "current_release_date": "2024-11-22T15:56:20+00:00", "generator": { "date": "2024-11-22T15:56:20+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0494", "initial_release_date": "2021-02-11T13:51:48+00:00", "revision_history": [ { "date": "2021-02-11T13:51:48+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:51:48+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:20+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el7" } } }, { "category": "product_name", "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product": { "name": "Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.4::el8" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=src" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el7jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } }, { "category": "product_version", "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_id": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-native-debuginfo@1.2.25-3.redhat_3.el8jws?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el7jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-admin-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-docs-webapp@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-el-3.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-javadoc@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-jsp-2.3-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-lib@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-selinux@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-servlet-4.0-api@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } }, { "category": "product_version", "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_id": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/jws5-tomcat-webapps@9.0.36-9.redhat_8.1.el8jws?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 7 Server", "product_id": "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "relates_to_product_reference": "7Server-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src" }, "product_reference": "jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64 as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64" }, "product_reference": "jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" }, { "category": "default_component_of", "full_product_name": { "name": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch as a component of Red Hat JBoss Web Server 5.4 for RHEL 8", "product_id": "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" }, "product_reference": "jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "relates_to_product_reference": "8Base-JWS-5.4" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" }, { "cve": "CVE-2020-13943", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-10-13T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1887648" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources. The highest threat from this vulnerability is to data confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Apache Tomcat HTTP/2 Request mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management is using an affected version of Tomcat bundled within PKI servlet engine, however HTTP/2 protocol is not supported by this component.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-13943" }, { "category": "external", "summary": "RHBZ#1887648", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1887648" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-13943", "url": "https://www.cve.org/CVERecord?id=CVE-2020-13943" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-13943" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202010.mbox/%3C2b767c6e-dcb9-5816-bd69-a3bc0771fef3%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M8" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.58" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.38" } ], "release_date": "2020-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Apache Tomcat HTTP/2 Request mix-up" }, { "cve": "CVE-2020-17527", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2020-12-03T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1904221" } ], "notes": [ { "category": "description", "text": "While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: HTTP/2 request header mix-up", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Enterprise Linux 8\u0027s Identity Management and Certificate System are using a vulnerable version of Tomcat that is bundled into the pki-servlet-engine component. However, HTTP/2 is not enabled in such a configuration, and it is not possible to trigger the flaw in a supported setup. A future update may fix the code.\n\nRed Hat Enterprise Linux 7\u0027s tomcat package, Identity Management, and Certificate System are all not affected by this flaw because HTTP/2 is not supported in the shipped version of tomcat in those packages.\n\ntomcat5 and tomcat6 in Red Hat Enterprise Linux 5 and 6 (respectively) are not affected by this flaw because HTTP/2 is not supported in the shipped versions of those packages.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-17527" }, { "category": "external", "summary": "RHBZ#1904221", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1904221" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-17527", "url": "https://www.cve.org/CVERecord?id=CVE-2020-17527" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-17527" }, { "category": "external", "summary": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10", "url": "http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M10" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2020-12-03T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: HTTP/2 request header mix-up" }, { "cve": "CVE-2021-24122", "cwe": { "id": "CWE-200", "name": "Exposure of Sensitive Information to an Unauthorized Actor" }, "discovery_date": "2021-01-15T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1917209" } ], "notes": [ { "category": "description", "text": "A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath(), which was caused by the inconsistent behavior of the Windows API (FindFirstFileW) in some circumstances. The highest threat from this vulnerability is to confidentiality.", "title": "Vulnerability description" }, { "category": "summary", "text": "tomcat: Information disclosure when using NTFS file system", "title": "Vulnerability summary" }, { "category": "other", "text": "In Red Hat OpenStack Platform\u0027s OpenDaylight, tomcat is disabled by default. Further, ODL deployments are not supported on untrusted administrator networks; even if tomcat is enabled, if random users can access it, this would be in an unsupported configuration. For this reason, the RHOSP impact has been reduced and no update will be provided at this time for the ODL tomcat package.\n\nThis flaw does not affect tomcat or pki-servlet-engine as shipped with Red Hat Enterprise Linux 6, 7, or 8 because the functionality involving FindFirstFileW() is specific to the Windows native code. Additionally, RHEL is not shipped with NTFS support.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2021-24122" }, { "category": "external", "summary": "RHBZ#1917209", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1917209" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2021-24122", "url": "https://www.cve.org/CVERecord?id=CVE-2021-24122" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-24122" }, { "category": "external", "summary": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E", "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373%40apache.org%3E" }, { "category": "external", "summary": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107", "url": "http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107" }, { "category": "external", "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60", "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60" }, { "category": "external", "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40", "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40" } ], "release_date": "2021-01-14T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:51:48+00:00", "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0494" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.src", "7Server-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el7jws.x86_64", "7Server-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el7jws.noarch", "7Server-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el7jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-0:9.0.36-9.redhat_8.1.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-admin-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-docs-webapp-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-el-3.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-javadoc-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-jsp-2.3-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-lib-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.src", "8Base-JWS-5.4:jws5-tomcat-native-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-native-debuginfo-0:1.2.25-3.redhat_3.el8jws.x86_64", "8Base-JWS-5.4:jws5-tomcat-selinux-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-servlet-4.0-api-0:9.0.36-9.redhat_8.1.el8jws.noarch", "8Base-JWS-5.4:jws5-tomcat-webapps-0:9.0.36-9.redhat_8.1.el8jws.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "tomcat: Information disclosure when using NTFS file system" } ] }
rhsa-2020_5641
Vulnerability from csaf_redhat
Published
2020-12-21 12:21
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5641", "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5641.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:49+00:00", "generator": { "date": "2024-11-22T15:56:49+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5641", "initial_release_date": "2020-12-21T12:21:57+00:00", "revision_history": [ { "date": "2020-12-21T12:21:57+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:21:57+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:49+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_aus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product": { "name": "Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_tus:7.4::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.src", "product": { "name": "openssl-1:1.0.2k-9.el7_4.src", "product_id": "openssl-1:1.0.2k-9.el7_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_id": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_id": "openssl-static-1:1.0.2k-9.el7_4.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_id": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-9.el7_4?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.4)", "product_id": "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server E4S (v. 7.4)", "product_id": "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server TUS (v. 7.4)", "product_id": "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.4)", "product_id": "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.AUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.ppc64le as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.ppc64le", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional E4S (v. 7.4)", "product_id": "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.src as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.src", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.i686 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.i686", "relates_to_product_reference": "7Server-optional-7.4.TUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-9.el7_4.x86_64 as a component of Red Hat Enterprise Linux Server Optional TUS (v. 7.4)", "product_id": "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-9.el7_4.x86_64", "relates_to_product_reference": "7Server-optional-7.4.TUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:21:57+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5641" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.AUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.AUS:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.E4S:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.ppc64le", "7Server-optional-7.4.E4S:openssl-static-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.src", "7Server-optional-7.4.TUS:openssl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-debuginfo-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-devel-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-libs-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-perl-1:1.0.2k-9.el7_4.x86_64", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.i686", "7Server-optional-7.4.TUS:openssl-static-1:1.0.2k-9.el7_4.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5476
Vulnerability from csaf_redhat
Published
2020-12-15 17:22
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security and bug fix update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)
* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Reject certificates with explicit EC parameters in strict mode (BZ#1891541)\n\n* Add FIPS selftest for HKDF, SSKDF, SSHKDF, and TLS12PRF; add DH_compute_key KAT to DH selftest (BZ#1891542)", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5476", "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5476.json" } ], "title": "Red Hat Security Advisory: openssl security and bug fix update", "tracking": { "current_release_date": "2024-11-22T15:56:01+00:00", "generator": { "date": "2024-11-22T15:56:01+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5476", "initial_release_date": "2020-12-15T17:22:46+00:00", "revision_history": [ { "date": "2020-12-15T17:22:46+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-15T17:22:46+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:01+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product": { "name": "Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.src", "product": { "name": "openssl-1:1.1.1g-12.el8_3.src", "product_id": "openssl-1:1.1.1g-12.el8_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=aarch64\u0026epoch=1" } } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_id": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1g-12.el8_3?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.src", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-devel-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.aarch64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.s390x", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1g-12.el8_3.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)", "product_id": "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" }, "product_reference": "openssl-perl-1:1.1.1g-12.el8_3.x86_64", "relates_to_product_reference": "BaseOS-8.3.0.Z.MAIN" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-15T17:22:46+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5476" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.src", "BaseOS-8.3.0.Z.MAIN:openssl-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-debugsource-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-devel-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.i686", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-libs-debuginfo-1:1.1.1g-12.el8_3.x86_64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.aarch64", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.ppc64le", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.s390x", "BaseOS-8.3.0.Z.MAIN:openssl-perl-1:1.1.1g-12.el8_3.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5623
Vulnerability from csaf_redhat
Published
2020-12-17 17:01
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.7 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5623", "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5623.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:25+00:00", "generator": { "date": "2024-11-22T15:56:25+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5623", "initial_release_date": "2020-12-17T17:01:47+00:00", "revision_history": [ { "date": "2020-12-17T17:01:47+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-17T17:01:47+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:25+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.7::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.src", "product": { "name": "openssl-1:1.0.2k-20.el7_7.src", "product_id": "openssl-1:1.0.2k-20.el7_7.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_id": "openssl-static-1:1.0.2k-20.el7_7.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_id": "openssl-static-1:1.0.2k-20.el7_7.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-devel-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-libs-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_id": "openssl-static-1:1.0.2k-20.el7_7.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-20.el7_7?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)", "product_id": "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)", "product_id": "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.7)", "product_id": "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.src", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.i686", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.ppc64le", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.s390x", "relates_to_product_reference": "7Server-optional-7.7.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-20.el7_7.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.7)", "product_id": "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-20.el7_7.x86_64", "relates_to_product_reference": "7Server-optional-7.7.EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-17T17:01:47+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5623" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7ComputeNode-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7ComputeNode-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.src", "7Server-optional-7.7.EUS:openssl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-debuginfo-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-devel-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-libs-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-perl-1:1.0.2k-20.el7_7.x86_64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.i686", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.ppc64le", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.s390x", "7Server-optional-7.7.EUS:openssl-static-1:1.0.2k-20.el7_7.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2021:0491
Vulnerability from csaf_redhat
Published
2021-02-11 13:39
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update
Notes
Topic
An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.
Red Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.
This release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat JBoss Web Server 3.1, for RHEL 7 and Windows.\n\nRed Hat Product Security has rated this release as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache HTTP Server, the Apache Tomcat Servlet container, Apache Tomcat Connector (mod_jk), JBoss HTTP Connector (mod_cluster), Hibernate, and the Tomcat Native library.\n\nThis release of Red Hat JBoss Web Server 3.1 Service Pack 11 serves as a replacement for Red Hat JBoss Web Server 3.1, and includes bug fixes, which are documented in the Release Notes document linked to in the References.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0491", "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0491.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 3.1 Service Pack 11 security update", "tracking": { "current_release_date": "2024-11-22T15:56:43+00:00", "generator": { "date": "2024-11-22T15:56:43+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0491", "initial_release_date": "2021-02-11T13:39:36+00:00", "revision_history": [ { "date": "2021-02-11T13:39:36+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:39:36+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:43+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat JBoss Web Server 3.1", "product": { "name": "Red Hat JBoss Web Server 3.1", "product_id": "Red Hat JBoss Web Server 3.1", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:3.1" } } } ], "category": "product_family", "name": "Red Hat JBoss Web Server" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Red Hat JBoss Web Server 3.1" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:39:36+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0491" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "Red Hat JBoss Web Server 3.1" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Red Hat JBoss Web Server 3.1" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2020:5642
Vulnerability from csaf_redhat
Published
2020-12-21 12:46
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5642", "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5642.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:57+00:00", "generator": { "date": "2024-11-22T15:56:57+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5642", "initial_release_date": "2020-12-21T12:46:04+00:00", "revision_history": [ { "date": "2020-12-21T12:46:04+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-21T12:46:04+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:57+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product": { "name": "Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_eus:7.6::server" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-static-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-static-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-static-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-devel-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_id": "openssl-libs-1:1.0.2k-17.el7_6.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-17.el7_6?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-17.el7_6.src", "product": { "name": "openssl-1:1.0.2k-17.el7_6.src", "product_id": "openssl-1:1.0.2k-17.el7_6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-17.el7_6?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)", "product_id": "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)", "product_id": "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server EUS (v. 7.6)", "product_id": "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)", "product_id": "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux Server Optional EUS (v. 7.6)", "product_id": "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-7.6.EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.src as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.src", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.i686 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.i686", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.ppc64le as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.ppc64le", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.s390x as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.s390x", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-17.el7_6.x86_64 as a component of Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)", "product_id": "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-17.el7_6.x86_64", "relates_to_product_reference": "7Server-optional-Alt-7.6-EUS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-21T12:46:04+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5642" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7ComputeNode-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7ComputeNode-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-7.6.EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-7.6.EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.src", "7Server-optional-Alt-7.6-EUS:openssl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-debuginfo-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-devel-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-libs-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-perl-1:1.0.2k-17.el7_6.x86_64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.i686", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.ppc64le", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.s390x", "7Server-optional-Alt-7.6-EUS:openssl-static-1:1.0.2k-17.el7_6.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020_5588
Vulnerability from csaf_redhat
Published
2020-12-16 15:15
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5588", "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5588.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:09+00:00", "generator": { "date": "2024-11-22T15:56:09+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5588", "initial_release_date": "2020-12-16T15:15:01+00:00", "revision_history": [ { "date": "2020-12-16T15:15:01+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T15:15:01+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:09+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product": { "name": "Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_e4s:8.0::baseos" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.src", "product": { "name": "openssl-1:1.1.1-9.el8_0.src", "product_id": "openssl-1:1.1.1-9.el8_0.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_id": "openssl-devel-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_id": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@1.1.1-9.el8_0?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src" }, "product_reference": "openssl-1:1.1.1-9.el8_0.src", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-devel-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.ppc64le", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.1.1-9.el8_0.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)", "product_id": "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" }, "product_reference": "openssl-perl-1:1.1.1-9.el8_0.x86_64", "relates_to_product_reference": "BaseOS-8.0.0.Z.E4S" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T15:15:01+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5588" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.src", "BaseOS-8.0.0.Z.E4S:openssl-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-debugsource-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-devel-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.i686", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-libs-debuginfo-1:1.1.1-9.el8_0.x86_64", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.ppc64le", "BaseOS-8.0.0.Z.E4S:openssl-perl-1:1.1.1-9.el8_0.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0488
Vulnerability from csaf_redhat
Published
2021-02-11 13:29
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update
Notes
Topic
Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.
Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.
This release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.
This release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.
Security fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Low" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 6 zip release for RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat JBoss Core Services is a set of supplementary software for Red Hat JBoss middleware products. This software, such as Apache HTTP Server, is common to multiple JBoss middleware products, and is packaged under Red Hat JBoss Core Services to allow for faster distribution of updates, and for a more consistent update experience.\n\nThis release adds the new Apache HTTP Server 2.4.37 Service Pack 6 packages that are part of the JBoss Core Services offering.\n\nThis release serves as a replacement for Red Hat JBoss Core Services Pack Apache Server 2.4.37 Service Pack 5 and includes bug fixes and enhancements. Refer to the Release Notes for information on the most significant bug fixes and enhancements included in this release.\n\nSecurity fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0488", "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#low", "url": "https://access.redhat.com/security/updates/classification/#low" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.apachehttp\u0026downloadType=securityPatches\u0026version=2.4.37" }, { "category": "external", "summary": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c", "url": "https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=core.service.openssl\u0026downloadType=securityPatches\u0026version=1.1.1c" }, { "category": "external", "summary": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/", "url": "https://access.redhat.com/documentation/en-us/red_hat_jboss_core_services/2.4.37/" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0488.json" } ], "title": "Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.37 SP6 security update", "tracking": { "current_release_date": "2024-11-22T15:56:13+00:00", "generator": { "date": "2024-11-22T15:56:13+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0488", "initial_release_date": "2021-02-11T13:29:52+00:00", "revision_history": [ { "date": "2021-02-11T13:29:52+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-02-11T13:29:52+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:13+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "JBCS 2.4.37 SP6", "product": { "name": "JBCS 2.4.37 SP6", "product_id": "JBCS 2.4.37 SP6", "product_identification_helper": { "cpe": "cpe:/a:redhat:jboss_core_services:1" } } } ], "category": "product_family", "name": "Red Hat JBoss Core Services" } ], "category": "vendor", "name": "Red Hat" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "JBCS 2.4.37 SP6" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-02-11T13:29:52+00:00", "details": "Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on.\n\nThe References section of this erratum contains a download link for the update. You must be logged in to download the update.", "product_ids": [ "JBCS 2.4.37 SP6" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0488" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "JBCS 2.4.37 SP6" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "JBCS 2.4.37 SP6" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
RHSA-2021:0056
Vulnerability from csaf_redhat
Published
2021-01-11 10:34
Modified
2024-11-22 15:55
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2021:0056", "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0056.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:55:58+00:00", "generator": { "date": "2024-11-22T15:55:58+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2021:0056", "initial_release_date": "2021-01-11T10:34:05+00:00", "revision_history": [ { "date": "2021-01-11T10:34:05+00:00", "number": "1", "summary": "Initial version" }, { "date": "2021-01-11T10:34:05+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:55:58+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS", "product_identification_helper": { "cpe": "cpe:/o:redhat:rhel_els:6" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.src", "product": { "name": "openssl-0:1.0.1e-59.el6_10.src", "product_id": "openssl-0:1.0.1e-59.el6_10.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390" } } } ], "category": "architecture", "name": "s390" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=s390x" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_id": "openssl-static-0:1.0.1e-59.el6_10.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=x86_64" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_id": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-devel-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-perl-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.1e-59.el6_10?arch=i686" } } }, { "category": "product_version", "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_id": "openssl-static-0:1.0.1e-59.el6_10.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.1e-59.el6_10?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6 ELS)", "product_id": "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.src as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.src", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-devel-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-perl-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.i686", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.s390x", "relates_to_product_reference": "6Server-optional-ELS" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-0:1.0.1e-59.el6_10.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6 ELS)", "product_id": "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" }, "product_reference": "openssl-static-0:1.0.1e-59.el6_10.x86_64", "relates_to_product_reference": "6Server-optional-ELS" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2021-01-11T10:34:05+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2021:0056" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "6Server-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.src", "6Server-optional-ELS:openssl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-debuginfo-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-devel-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-perl-0:1.0.1e-59.el6_10.x86_64", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.i686", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.s390x", "6Server-optional-ELS:openssl-static-0:1.0.1e-59.el6_10.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
rhsa-2020:5566
Vulnerability from csaf_redhat
Published
2020-12-16 12:43
Modified
2024-11-22 15:56
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 7.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update for openssl is now available for Red Hat Enterprise Linux 7.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: EDIPARTYNAME NULL pointer de-reference (CVE-2020-1971)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2020:5566", "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5566.json" } ], "title": "Red Hat Security Advisory: openssl security update", "tracking": { "current_release_date": "2024-11-22T15:56:16+00:00", "generator": { "date": "2024-11-22T15:56:16+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2020:5566", "initial_release_date": "2020-12-16T12:43:39+00:00", "revision_history": [ { "date": "2020-12-16T12:43:39+00:00", "number": "1", "summary": "Initial version" }, { "date": "2020-12-16T12:43:39+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T15:56:16+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux Client (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::client" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::computenode" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::server" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } }, { "category": "product_name", "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product": { "name": "Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7::workstation" } } } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.src", "product": { "name": "openssl-1:1.0.2k-21.el7_9.src", "product_id": "openssl-1:1.0.2k-21.el7_9.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=src\u0026epoch=1" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=x86_64\u0026epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_id": "openssl-static-1:1.0.2k-21.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=i686\u0026epoch=1" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64le\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc64\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_id": "openssl-static-1:1.0.2k-21.el7_9.ppc", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=ppc\u0026epoch=1" } } } ], "category": "architecture", "name": "ppc" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390x\u0026epoch=1" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-devel-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-libs-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_id": "openssl-static-1:1.0.2k-21.el7_9.s390", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-static@1.0.2k-21.el7_9?arch=s390\u0026epoch=1" } } } ], "category": "architecture", "name": "s390" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)", "product_id": "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)", "product_id": "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Client-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)", "product_id": "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7ComputeNode-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)", "product_id": "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)", "product_id": "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Server-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)", "product_id": "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.src", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.i686", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.ppc64le as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.ppc64le", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.s390x as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.s390x", "relates_to_product_reference": "7Workstation-optional-7.9.Z" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-21.el7_9.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)", "product_id": "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-21.el7_9.x86_64", "relates_to_product_reference": "7Workstation-optional-7.9.Z" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "the OpenSSL project" ] }, { "names": [ "David Benjamin" ], "organization": "Google", "summary": "Acknowledged by upstream." } ], "cve": "CVE-2020-1971", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "discovery_date": "2020-12-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "1903409" } ], "notes": [ { "category": "description", "text": "A null pointer dereference flaw was found in openssl. A remote attacker, able to control the arguments of the GENERAL_NAME_cmp function, could cause the application, compiled with openssl to crash resulting in a denial of service. The highest threat from this vulnerability is to system availability.", "title": "Vulnerability description" }, { "category": "summary", "text": "openssl: EDIPARTYNAME NULL pointer de-reference", "title": "Vulnerability summary" }, { "category": "other", "text": "This is a flaw in the GENERAL_NAME_cmp function of openssl which can be triggered when both its arguments are of the same type i.e. EDIPARTYNAME. \n\n1. Red Hat does not ship any applications compiled with openssl, which used the above function in a vulnerable way.\n\n2. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes, when comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate and when verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token). If an attacker can control both items being compared then that attacker could trigger a crash. For example, if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then a crash may be triggered.\n\nThird party applications compiled with openssl using the function GENERAL_NAME_cmp in a vulnerable way are affected by this flaw.\n\nGENERAL_NAME_cmp was added in 0.9.8k, therefore older versions of openssl are not affected by this flaw.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "RHBZ#1903409", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1903409" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2020-1971", "url": "https://www.cve.org/CVERecord?id=CVE-2020-1971" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971", "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-1971" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20201208.txt", "url": "https://www.openssl.org/news/secadv/20201208.txt" } ], "release_date": "2020-12-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2020-12-16T12:43:39+00:00", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2020:5566" }, { "category": "workaround", "details": "Applications not using the GENERAL_NAME_cmp of openssl are not vulnerable to this flaw. Even when this function is used, if the attacker can control both the arguments of this function, only then the attacker could trigger a crash.", "product_ids": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Client-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Client-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7ComputeNode-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7ComputeNode-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Server-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Server-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.src", "7Workstation-optional-7.9.Z:openssl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-debuginfo-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-devel-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-libs-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-perl-1:1.0.2k-21.el7_9.x86_64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.i686", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.ppc64le", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.s390x", "7Workstation-optional-7.9.Z:openssl-static-1:1.0.2k-21.el7_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "openssl: EDIPARTYNAME NULL pointer de-reference" } ] }
opensuse-su-2020:2269-1
Vulnerability from csaf_opensuse
Published
2020-12-17 17:31
Modified
2020-12-17 17:31
Summary
Security update for openssl-1_0_0
Notes
Title of the patch
Security update for openssl-1_0_0
Description of the patch
This update for openssl-1_0_0 fixes the following issues:
- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
- Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673).
- Fixed a test failure in apache_ssl in fips mode (bsc#1177793).
- Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575).
- Restored private key check in EC_KEY_check_key (bsc#1177479).
- Added shared secret KAT to FIPS DH selftest (bsc#1176029).
- Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029).
- Used SHA-2 in the RSA pairwise consistency check (bsc#1155346)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-2269
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for openssl-1_0_0", "title": "Title of the patch" }, { "category": "description", "text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).\n- Initialized dh-\u003enid to NID_undef in DH_new_method() (bsc#1177673).\n- Fixed a test failure in apache_ssl in fips mode (bsc#1177793).\n- Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575).\n- Restored private key check in EC_KEY_check_key (bsc#1177479).\n- Added shared secret KAT to FIPS DH selftest (bsc#1176029).\n- Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029).\n- Used SHA-2 in the RSA pairwise consistency check (bsc#1155346)\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-2269", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2269-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:2269-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGJECGZC6A7C36WKBWL3FKK6U7IGO4OK/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:2269-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SGJECGZC6A7C36WKBWL3FKK6U7IGO4OK/" }, { "category": "self", "summary": "SUSE Bug 1155346", "url": "https://bugzilla.suse.com/1155346" }, { "category": "self", "summary": "SUSE Bug 1176029", "url": "https://bugzilla.suse.com/1176029" }, { "category": "self", "summary": "SUSE Bug 1177479", "url": "https://bugzilla.suse.com/1177479" }, { "category": "self", "summary": "SUSE Bug 1177575", "url": "https://bugzilla.suse.com/1177575" }, { "category": "self", "summary": "SUSE Bug 1177673", "url": "https://bugzilla.suse.com/1177673" }, { "category": "self", "summary": "SUSE Bug 1177793", "url": "https://bugzilla.suse.com/1177793" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" } ], "title": "Security update for openssl-1_0_0", "tracking": { "current_release_date": "2020-12-17T17:31:21Z", "generator": { "date": "2020-12-17T17:31:21Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:2269-1", "initial_release_date": "2020-12-17T17:31:21Z", "revision_history": [ { "date": "2020-12-17T17:31:21Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "product": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "product_id": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "libopenssl10-1.0.2p-lp151.5.20.1.i586", "product": { "name": "libopenssl10-1.0.2p-lp151.5.20.1.i586", "product_id": "libopenssl10-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "product": { "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "product_id": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "product": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "product_id": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "product": { "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "product_id": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "product": { "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "product_id": "openssl-1_0_0-1.0.2p-lp151.5.20.1.i586" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "product": { "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "product_id": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch", "product": { "name": "openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch", "product_id": "openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl10-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "product_id": "openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "product": { "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "product_id": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.1", "product": { "name": "openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "libopenssl10-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586" }, "product_reference": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64" }, "product_reference": "openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch" }, "product_reference": "openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl-1_0_0-devel-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl10-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-hmac-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:libopenssl1_0_0-steam-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:libopenssl1_0_0-steam-32bit-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.i586", "openSUSE Leap 15.1:openssl-1_0_0-cavs-1.0.2p-lp151.5.20.1.x86_64", "openSUSE Leap 15.1:openssl-1_0_0-doc-1.0.2p-lp151.5.20.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2020-12-17T17:31:21Z", "details": "important" } ], "title": "CVE-2020-1971" } ] }
opensuse-su-2024:11041-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
matrix-synapse-1.43.0-1.1 on GA media
Notes
Title of the patch
matrix-synapse-1.43.0-1.1 on GA media
Description of the patch
These are all security issues fixed in the matrix-synapse-1.43.0-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11041
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "matrix-synapse-1.43.0-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the matrix-synapse-1.43.0-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-11041", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11041-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2018-12291 page", "url": "https://www.suse.com/security/cve/CVE-2018-12291/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-5885 page", "url": "https://www.suse.com/security/cve/CVE-2019-5885/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-10108 page", "url": "https://www.suse.com/security/cve/CVE-2020-10108/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-10109 page", "url": "https://www.suse.com/security/cve/CVE-2020-10109/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-26257 page", "url": "https://www.suse.com/security/cve/CVE-2020-26257/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-26891 page", "url": "https://www.suse.com/security/cve/CVE-2020-26891/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-29471 page", "url": "https://www.suse.com/security/cve/CVE-2021-29471/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3449 page", "url": "https://www.suse.com/security/cve/CVE-2021-3449/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-39163 page", "url": "https://www.suse.com/security/cve/CVE-2021-39163/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-39164 page", "url": "https://www.suse.com/security/cve/CVE-2021-39164/" } ], "title": "matrix-synapse-1.43.0-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:11041-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "matrix-synapse-1.43.0-1.1.aarch64", "product": { "name": "matrix-synapse-1.43.0-1.1.aarch64", "product_id": "matrix-synapse-1.43.0-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "matrix-synapse-1.43.0-1.1.ppc64le", "product": { "name": "matrix-synapse-1.43.0-1.1.ppc64le", "product_id": "matrix-synapse-1.43.0-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "matrix-synapse-1.43.0-1.1.s390x", "product": { "name": "matrix-synapse-1.43.0-1.1.s390x", "product_id": "matrix-synapse-1.43.0-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "matrix-synapse-1.43.0-1.1.x86_64", "product": { "name": "matrix-synapse-1.43.0-1.1.x86_64", "product_id": "matrix-synapse-1.43.0-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "matrix-synapse-1.43.0-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64" }, "product_reference": "matrix-synapse-1.43.0-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "matrix-synapse-1.43.0-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le" }, "product_reference": "matrix-synapse-1.43.0-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "matrix-synapse-1.43.0-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x" }, "product_reference": "matrix-synapse-1.43.0-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "matrix-synapse-1.43.0-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" }, "product_reference": "matrix-synapse-1.43.0-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2018-12291", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2018-12291" } ], "notes": [ { "category": "general", "text": "The on_get_missing_events function in handlers/federation.py in Matrix Synapse before 0.31.1 has a security bug in the get_missing_events federation API where event visibility rules were not applied correctly.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2018-12291", "url": "https://www.suse.com/security/cve/CVE-2018-12291" }, { "category": "external", "summary": "SUSE Bug 1096833 for CVE-2018-12291", "url": "https://bugzilla.suse.com/1096833" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2018-12291" }, { "cve": "CVE-2019-5885", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2019-5885" } ], "notes": [ { "category": "general", "text": "Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers to impersonate users.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2019-5885", "url": "https://www.suse.com/security/cve/CVE-2019-5885" }, { "category": "external", "summary": "SUSE Bug 1121886 for CVE-2019-5885", "url": "https://bugzilla.suse.com/1121886" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2019-5885" }, { "cve": "CVE-2020-10108", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-10108" } ], "notes": [ { "category": "general", "text": "In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the second content-length value was set to zero, the request body was interpreted as a pipelined request.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-10108", "url": "https://www.suse.com/security/cve/CVE-2020-10108" }, { "category": "external", "summary": "SUSE Bug 1166457 for CVE-2020-10108", "url": "https://bugzilla.suse.com/1166457" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-10108" }, { "cve": "CVE-2020-10109", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-10109" } ], "notes": [ { "category": "general", "text": "In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted as a pipelined request.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-10109", "url": "https://www.suse.com/security/cve/CVE-2020-10109" }, { "category": "external", "summary": "SUSE Bug 1166458 for CVE-2020-10109", "url": "https://bugzilla.suse.com/1166458" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-10109" }, { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2020-26257", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-26257" } ], "notes": [ { "category": "general", "text": "Matrix is an ecosystem for open federated Instant Messaging and VoIP. Synapse is a reference \"homeserver\" implementation of Matrix. A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a `/send_join`, `/send_leave`, `/invite` or `/exchange_third_party_invite` request. This can lead to a denial of service in which future events will not be correctly sent to other servers over federation. This affects any server which accepts federation requests from untrusted servers. The Matrix Synapse reference implementation before version 1.23.1 the implementation is vulnerable to this injection attack. Issue is fixed in version 1.23.1. As a workaround homeserver administrators could limit access to the federation API to trusted servers (for example via `federation_domain_whitelist`).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-26257", "url": "https://www.suse.com/security/cve/CVE-2020-26257" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2020-26257" }, { "cve": "CVE-2020-26891", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-26891" } ], "notes": [ { "category": "general", "text": "AuthRestServlet in Matrix Synapse before 1.21.0 is vulnerable to XSS due to unsafe interpolation of the session GET parameter. This allows a remote attacker to execute an XSS attack on the domain Synapse is hosted on, by supplying the victim user with a malicious URL to the /_matrix/client/r0/auth/*/fallback/web or /_matrix/client/unstable/auth/*/fallback/web Synapse endpoints.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-26891", "url": "https://www.suse.com/security/cve/CVE-2020-26891" }, { "category": "external", "summary": "SUSE Bug 1179186 for CVE-2020-26891", "url": "https://bugzilla.suse.com/1179186" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2020-26891" }, { "cve": "CVE-2021-29471", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-29471" } ], "notes": [ { "category": "general", "text": "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 \"Push rules\" can specify conditions under which they will match, including `event_match`, which matches event content against a pattern including wildcards. Certain patterns can cause very poor performance in the matching engine, leading to a denial-of-service when processing moderate length events. The issue is patched in version 1.33.2. A potential workaround might be to prevent users from making custom push rules, by blocking such requests at a reverse-proxy.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-29471", "url": "https://www.suse.com/security/cve/CVE-2021-29471" }, { "category": "external", "summary": "SUSE Bug 1185947 for CVE-2021-29471", "url": "https://bugzilla.suse.com/1185947" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2021-29471" }, { "cve": "CVE-2021-3449", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-3449" } ], "notes": [ { "category": "general", "text": "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-3449", "url": "https://www.suse.com/security/cve/CVE-2021-3449" }, { "category": "external", "summary": "SUSE Bug 1183852 for CVE-2021-3449", "url": "https://bugzilla.suse.com/1183852" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-3449" }, { "cve": "CVE-2021-39163", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-39163" } ], "notes": [ { "category": "general", "text": "Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the name, avatar, topic and number of members of a room if they know the ID of the room. This vulnerability is limited to homeservers where the vulnerable homeserver is in the room and untrusted users are permitted to create groups (communities). By default, only homeserver administrators can create groups. However, homeserver administrators can already access this information in the database or using the admin API. As a result, only homeservers where the configuration setting `enable_group_creation` has been set to `true` are impacted. Server administrators should upgrade to 1.41.1 or higher to patch the vulnerability. There are two potential workarounds. Server administrators can set `enable_group_creation` to `false` in their homeserver configuration (this is the default value) to prevent creation of groups by non-administrators. Administrators that are using a reverse proxy could, with partial loss of group functionality, block the endpoints `/_matrix/client/r0/groups/{group_id}/rooms` and `/_matrix/client/unstable/groups/{group_id}/rooms`.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-39163", "url": "https://www.suse.com/security/cve/CVE-2021-39163" }, { "category": "external", "summary": "SUSE Bug 1190037 for CVE-2021-39163", "url": "https://bugzilla.suse.com/1190037" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2021-39163" }, { "cve": "CVE-2021-39164", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-39164" } ], "notes": [ { "category": "general", "text": "Matrix is an ecosystem for open federated Instant Messaging and Voice over IP. In versions 1.41.0 and prior, unauthorised users can access the membership (list of members, with their display names) of a room if they know the ID of the room. The vulnerability is limited to rooms with `shared` history visibility. Furthermore, the unauthorised user must be using an account on a vulnerable homeserver that is in the room. Server administrators should upgrade to 1.41.1 or later in order to receive the patch. One workaround is available. Administrators of servers that use a reverse proxy could, with potentially unacceptable loss of functionality, block the endpoints: `/_matrix/client/r0/rooms/{room_id}/members` with `at` query parameter, and `/_matrix/client/unstable/rooms/{room_id}/members` with `at` query parameter.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-39164", "url": "https://www.suse.com/security/cve/CVE-2021-39164" }, { "category": "external", "summary": "SUSE Bug 1190038 for CVE-2021-39164", "url": "https://bugzilla.suse.com/1190038" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 3.1, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.aarch64", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.ppc64le", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.s390x", "openSUSE Tumbleweed:matrix-synapse-1.43.0-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2021-39164" } ] }
opensuse-su-2024:12687-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libopenssl-1_0_0-devel-1.0.2u-12.1 on GA media
Notes
Title of the patch
libopenssl-1_0_0-devel-1.0.2u-12.1 on GA media
Description of the patch
These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-12.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-12687
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libopenssl-1_0_0-devel-1.0.2u-12.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2u-12.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-12687", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12687-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2022-4304 page", "url": "https://www.suse.com/security/cve/CVE-2022-4304/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0215 page", "url": "https://www.suse.com/security/cve/CVE-2023-0215/" }, { "category": "self", "summary": "SUSE CVE CVE-2023-0286 page", "url": "https://www.suse.com/security/cve/CVE-2023-0286/" } ], "title": "libopenssl-1_0_0-devel-1.0.2u-12.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:12687-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "product_id": "libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl10-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl10-1.0.2u-12.1.aarch64", "product_id": "libopenssl10-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-steam-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2u-12.1.aarch64", "product": { "name": "openssl-1_0_0-1.0.2u-12.1.aarch64", "product_id": "openssl-1_0_0-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "product": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "product_id": "openssl-1_0_0-cavs-1.0.2u-12.1.aarch64" } }, { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "product": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "product_id": "openssl-1_0_0-doc-1.0.2u-12.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "product_id": "libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl10-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl10-1.0.2u-12.1.ppc64le", "product_id": "libopenssl10-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2u-12.1.ppc64le", "product": { "name": "openssl-1_0_0-1.0.2u-12.1.ppc64le", "product_id": "openssl-1_0_0-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "product": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "product_id": "openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le" } }, { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "product": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "product_id": "openssl-1_0_0-doc-1.0.2u-12.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "product": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "product_id": "libopenssl-1_0_0-devel-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl10-1.0.2u-12.1.s390x", "product": { "name": "libopenssl10-1.0.2u-12.1.s390x", "product_id": "libopenssl10-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-32bit-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-hmac-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-steam-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2u-12.1.s390x", "product": { "name": "openssl-1_0_0-1.0.2u-12.1.s390x", "product_id": "openssl-1_0_0-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "product": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "product_id": "openssl-1_0_0-cavs-1.0.2u-12.1.s390x" } }, { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2u-12.1.s390x", "product": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.s390x", "product_id": "openssl-1_0_0-doc-1.0.2u-12.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "product_id": "libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl10-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl10-1.0.2u-12.1.x86_64", "product_id": "libopenssl10-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-steam-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2u-12.1.x86_64", "product": { "name": "openssl-1_0_0-1.0.2u-12.1.x86_64", "product_id": "openssl-1_0_0-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "product": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "product_id": "openssl-1_0_0-cavs-1.0.2u-12.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2u-12.1.x86_64", "product": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.x86_64", "product_id": "openssl-1_0_0-doc-1.0.2u-12.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl10-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl10-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl10-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl10-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64" }, "product_reference": "openssl-1_0_0-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le" }, "product_reference": "openssl-1_0_0-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x" }, "product_reference": "openssl-1_0_0-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64" }, "product_reference": "openssl-1_0_0-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64" }, "product_reference": "openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le" }, "product_reference": "openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x" }, "product_reference": "openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64" }, "product_reference": "openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64" }, "product_reference": "openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le" }, "product_reference": "openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x" }, "product_reference": "openssl-1_0_0-doc-1.0.2u-12.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2u-12.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" }, "product_reference": "openssl-1_0_0-doc-1.0.2u-12.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2022-4304", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2022-4304" } ], "notes": [ { "category": "general", "text": "A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.\n\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2022-4304", "url": "https://www.suse.com/security/cve/CVE-2022-4304" }, { "category": "external", "summary": "SUSE Bug 1207534 for CVE-2022-4304", "url": "https://bugzilla.suse.com/1207534" }, { "category": "external", "summary": "SUSE Bug 1210067 for CVE-2022-4304", "url": "https://bugzilla.suse.com/1210067" }, { "category": "external", "summary": "SUSE Bug 1213146 for CVE-2022-4304", "url": "https://bugzilla.suse.com/1213146" }, { "category": "external", "summary": "SUSE Bug 1213289 for CVE-2022-4304", "url": "https://bugzilla.suse.com/1213289" }, { "category": "external", "summary": "SUSE Bug 1215014 for CVE-2022-4304", "url": "https://bugzilla.suse.com/1215014" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2022-4304" }, { "cve": "CVE-2023-0215", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0215" } ], "notes": [ { "category": "general", "text": "The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.\n\n\n\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0215", "url": "https://www.suse.com/security/cve/CVE-2023-0215" }, { "category": "external", "summary": "SUSE Bug 1207536 for CVE-2023-0215", "url": "https://bugzilla.suse.com/1207536" }, { "category": "external", "summary": "SUSE Bug 1213146 for CVE-2023-0215", "url": "https://bugzilla.suse.com/1213146" }, { "category": "external", "summary": "SUSE Bug 1225628 for CVE-2023-0215", "url": "https://bugzilla.suse.com/1225628" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2023-0215" }, { "cve": "CVE-2023-0286", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2023-0286" } ], "notes": [ { "category": "general", "text": "There is a type confusion vulnerability relating to X.400 address processing\ninside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but\nthe public structure definition for GENERAL_NAME incorrectly specified the type\nof the x400Address field as ASN1_TYPE. This field is subsequently interpreted by\nthe OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an\nASN1_STRING.\n\nWhen CRL checking is enabled (i.e. the application sets the\nX509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass\narbitrary pointers to a memcmp call, enabling them to read memory contents or\nenact a denial of service. In most cases, the attack requires the attacker to\nprovide both the certificate chain and CRL, neither of which need to have a\nvalid signature. If the attacker only controls one of these inputs, the other\ninput must already contain an X.400 address as a CRL distribution point, which\nis uncommon. As such, this vulnerability is most likely to only affect\napplications which have implemented their own functionality for retrieving CRLs\nover a network.\n\n", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2023-0286", "url": "https://www.suse.com/security/cve/CVE-2023-0286" }, { "category": "external", "summary": "SUSE Bug 1207533 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1207533" }, { "category": "external", "summary": "SUSE Bug 1207569 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1207569" }, { "category": "external", "summary": "SUSE Bug 1211136 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1211136" }, { "category": "external", "summary": "SUSE Bug 1211503 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1211503" }, { "category": "external", "summary": "SUSE Bug 1213146 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1213146" }, { "category": "external", "summary": "SUSE Bug 1214269 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1214269" }, { "category": "external", "summary": "SUSE Bug 1218477 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1218477" }, { "category": "external", "summary": "SUSE Bug 1218967 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1218967" }, { "category": "external", "summary": "SUSE Bug 1225677 for CVE-2023-0286", "url": "https://bugzilla.suse.com/1225677" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl-1_0_0-devel-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl10-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-hmac-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:libopenssl1_0_0-steam-32bit-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-cavs-1.0.2u-12.1.x86_64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.aarch64", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.ppc64le", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.s390x", "openSUSE Tumbleweed:openssl-1_0_0-doc-1.0.2u-12.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2023-0286" } ] }
opensuse-su-2021:0082-1
Vulnerability from csaf_opensuse
Published
2021-01-16 11:24
Modified
2021-01-16 11:24
Summary
Security update for nodejs10
Notes
Title of the patch
Security update for nodejs10
Description of the patch
This update for nodejs10 fixes the following issues:
- New upstream LTS version 10.23.1:
* CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
implementation. When writing to a TLS enabled socket,
node::StreamBase::Write calls node::TLSWrap::DoWrite with
a freshly allocated WriteWrap object as first argument.
If the DoWrite method does not return an error, this object is
passed back to the caller as part of a StreamWriteResult structure.
This may be exploited to corrupt memory leading to a
Denial of Service or potentially other exploits (bsc#1180553)
* CVE-2020-8287: HTTP Request Smuggling allow two copies of a
header field in a http request. For example, two Transfer-Encoding
header fields. In this case Node.js identifies the first header
field and ignores the second. This can lead to HTTP Request
Smuggling (https://cwe.mitre.org/data/definitions/444.html).
(bsc#1180554)
* CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
(High) This is a vulnerability in OpenSSL which may be exploited
through Node.js. (bsc#1179491)
- New upstream LTS version 10.23.0:
* deps: upgrade npm to 6.14.8
* n-api:
+ create N-API version 7
+ expose napi_build_version variable
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2021-82
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs10", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs10 fixes the following issues:\n\n- New upstream LTS version 10.23.1:\n * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS\n implementation. When writing to a TLS enabled socket,\n node::StreamBase::Write calls node::TLSWrap::DoWrite with\n a freshly allocated WriteWrap object as first argument.\n If the DoWrite method does not return an error, this object is\n passed back to the caller as part of a StreamWriteResult structure.\n This may be exploited to corrupt memory leading to a\n Denial of Service or potentially other exploits (bsc#1180553)\n * CVE-2020-8287: HTTP Request Smuggling allow two copies of a\n header field in a http request. For example, two Transfer-Encoding\n header fields. In this case Node.js identifies the first header\n field and ignores the second. This can lead to HTTP Request\n Smuggling (https://cwe.mitre.org/data/definitions/444.html).\n (bsc#1180554)\n * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference\n (High) This is a vulnerability in OpenSSL which may be exploited\n through Node.js. (bsc#1179491)\n\n- New upstream LTS version 10.23.0:\n * deps: upgrade npm to 6.14.8\n * n-api:\n + create N-API version 7\n + expose napi_build_version variable\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-82", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0082-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:0082-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JQ2RC7AEXMLHMCFO7K3XLJO5WMPQXS7V/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:0082-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JQ2RC7AEXMLHMCFO7K3XLJO5WMPQXS7V/" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE Bug 1180553", "url": "https://bugzilla.suse.com/1180553" }, { "category": "self", "summary": "SUSE Bug 1180554", "url": "https://bugzilla.suse.com/1180554" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8265 page", "url": "https://www.suse.com/security/cve/CVE-2020-8265/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8287 page", "url": "https://www.suse.com/security/cve/CVE-2020-8287/" } ], "title": "Security update for nodejs10", "tracking": { "current_release_date": "2021-01-16T11:24:40Z", "generator": { "date": "2021-01-16T11:24:40Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:0082-1", "initial_release_date": "2021-01-16T11:24:40Z", "revision_history": [ { "date": "2021-01-16T11:24:40Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "nodejs10-10.23.1-lp151.2.15.1.i586", "product": { "name": "nodejs10-10.23.1-lp151.2.15.1.i586", "product_id": "nodejs10-10.23.1-lp151.2.15.1.i586" } }, { "category": "product_version", "name": "nodejs10-devel-10.23.1-lp151.2.15.1.i586", "product": { "name": "nodejs10-devel-10.23.1-lp151.2.15.1.i586", "product_id": "nodejs10-devel-10.23.1-lp151.2.15.1.i586" } }, { "category": "product_version", "name": "npm10-10.23.1-lp151.2.15.1.i586", "product": { "name": "npm10-10.23.1-lp151.2.15.1.i586", "product_id": "npm10-10.23.1-lp151.2.15.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "product": { "name": "nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "product_id": "nodejs10-docs-10.23.1-lp151.2.15.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs10-10.23.1-lp151.2.15.1.x86_64", "product": { "name": "nodejs10-10.23.1-lp151.2.15.1.x86_64", "product_id": "nodejs10-10.23.1-lp151.2.15.1.x86_64" } }, { "category": "product_version", "name": "nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "product": { "name": "nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "product_id": "nodejs10-devel-10.23.1-lp151.2.15.1.x86_64" } }, { "category": "product_version", "name": "npm10-10.23.1-lp151.2.15.1.x86_64", "product": { "name": "npm10-10.23.1-lp151.2.15.1.x86_64", "product_id": "npm10-10.23.1-lp151.2.15.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.1", "product": { "name": "openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs10-10.23.1-lp151.2.15.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586" }, "product_reference": "nodejs10-10.23.1-lp151.2.15.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-10.23.1-lp151.2.15.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64" }, "product_reference": "nodejs10-10.23.1-lp151.2.15.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-devel-10.23.1-lp151.2.15.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586" }, "product_reference": "nodejs10-devel-10.23.1-lp151.2.15.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-devel-10.23.1-lp151.2.15.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64" }, "product_reference": "nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-docs-10.23.1-lp151.2.15.1.noarch as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch" }, "product_reference": "nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "npm10-10.23.1-lp151.2.15.1.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586" }, "product_reference": "npm10-10.23.1-lp151.2.15.1.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "npm10-10.23.1-lp151.2.15.1.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" }, "product_reference": "npm10-10.23.1-lp151.2.15.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-16T11:24:40Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2020-8265", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8265" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8265", "url": "https://www.suse.com/security/cve/CVE-2020-8265" }, { "category": "external", "summary": "SUSE Bug 1180553 for CVE-2020-8265", "url": "https://bugzilla.suse.com/1180553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-16T11:24:40Z", "details": "important" } ], "title": "CVE-2020-8265" }, { "cve": "CVE-2020-8287", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8287" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8287", "url": "https://www.suse.com/security/cve/CVE-2020-8287" }, { "category": "external", "summary": "SUSE Bug 1180554 for CVE-2020-8287", "url": "https://bugzilla.suse.com/1180554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:nodejs10-devel-10.23.1-lp151.2.15.1.x86_64", "openSUSE Leap 15.1:nodejs10-docs-10.23.1-lp151.2.15.1.noarch", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.i586", "openSUSE Leap 15.1:npm10-10.23.1-lp151.2.15.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-16T11:24:40Z", "details": "moderate" } ], "title": "CVE-2020-8287" } ] }
opensuse-su-2020:2236-1
Vulnerability from csaf_opensuse
Published
2020-12-12 14:43
Modified
2020-12-12 14:43
Summary
Security update for openssl-1_0_0
Notes
Title of the patch
Security update for openssl-1_0_0
Description of the patch
This update for openssl-1_0_0 fixes the following issues:
- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
- Initialized dh->nid to NID_undef in DH_new_method() (bsc#1177673).
- Fixed a test failure in apache_ssl in fips mode (bsc#1177793).
- Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575).
- Restored private key check in EC_KEY_check_key (bsc#1177479).
- Added shared secret KAT to FIPS DH selftest (bsc#1176029).
- Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029).
- Used SHA-2 in the RSA pairwise consistency check (bsc#1155346)
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2020-2236
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for openssl-1_0_0", "title": "Title of the patch" }, { "category": "description", "text": "This update for openssl-1_0_0 fixes the following issues:\n\n- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).\n- Initialized dh-\u003enid to NID_undef in DH_new_method() (bsc#1177673).\n- Fixed a test failure in apache_ssl in fips mode (bsc#1177793).\n- Renamed BN_get_rfc3526_prime_* functions back to get_rfc3526_prime_* (bsc#1177575).\n- Restored private key check in EC_KEY_check_key (bsc#1177479).\n- Added shared secret KAT to FIPS DH selftest (bsc#1176029).\n- Included ECDH/DH Requirements from SP800-56Arev3 (bsc#1176029).\n- Used SHA-2 in the RSA pairwise consistency check (bsc#1155346)\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-2236", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2236-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:2236-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YDLYD3JFZSOPG5DPXOHFTMZTUOLPOK5J/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:2236-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YDLYD3JFZSOPG5DPXOHFTMZTUOLPOK5J/" }, { "category": "self", "summary": "SUSE Bug 1155346", "url": "https://bugzilla.suse.com/1155346" }, { "category": "self", "summary": "SUSE Bug 1176029", "url": "https://bugzilla.suse.com/1176029" }, { "category": "self", "summary": "SUSE Bug 1177479", "url": "https://bugzilla.suse.com/1177479" }, { "category": "self", "summary": "SUSE Bug 1177575", "url": "https://bugzilla.suse.com/1177575" }, { "category": "self", "summary": "SUSE Bug 1177673", "url": "https://bugzilla.suse.com/1177673" }, { "category": "self", "summary": "SUSE Bug 1177793", "url": "https://bugzilla.suse.com/1177793" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" } ], "title": "Security update for openssl-1_0_0", "tracking": { "current_release_date": "2020-12-12T14:43:28Z", "generator": { "date": "2020-12-12T14:43:28Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:2236-1", "initial_release_date": "2020-12-12T14:43:28Z", "revision_history": [ { "date": "2020-12-12T14:43:28Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "product": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "libopenssl10-1.0.2p-lp152.8.9.1.i586", "product": { "name": "libopenssl10-1.0.2p-lp152.8.9.1.i586", "product_id": "libopenssl10-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "product": { "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "product_id": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "product": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "product": { "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "product": { "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "product_id": "openssl-1_0_0-1.0.2p-lp152.8.9.1.i586" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "product": { "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch", "product": { "name": "openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch", "product_id": "openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl10-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "product_id": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "product_id": "openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "product": { "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "product_id": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "libopenssl10-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl10-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586" }, "product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64" }, "product_reference": "openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch" }, "product_reference": "openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_0_0-devel-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl10-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-hmac-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:libopenssl1_0_0-steam-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_0_0-steam-32bit-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.i586", "openSUSE Leap 15.2:openssl-1_0_0-cavs-1.0.2p-lp152.8.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_0_0-doc-1.0.2p-lp152.8.9.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2020-12-12T14:43:28Z", "details": "important" } ], "title": "CVE-2020-1971" } ] }
opensuse-su-2021:0065-1
Vulnerability from csaf_opensuse
Published
2021-01-15 09:23
Modified
2021-01-15 09:23
Summary
Security update for nodejs10
Notes
Title of the patch
Security update for nodejs10
Description of the patch
This update for nodejs10 fixes the following issues:
- New upstream LTS version 10.23.1:
* CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
implementation. When writing to a TLS enabled socket,
node::StreamBase::Write calls node::TLSWrap::DoWrite with
a freshly allocated WriteWrap object as first argument.
If the DoWrite method does not return an error, this object is
passed back to the caller as part of a StreamWriteResult structure.
This may be exploited to corrupt memory leading to a
Denial of Service or potentially other exploits (bsc#1180553)
* CVE-2020-8287: HTTP Request Smuggling allow two copies of a
header field in a http request. For example, two Transfer-Encoding
header fields. In this case Node.js identifies the first header
field and ignores the second. This can lead to HTTP Request
Smuggling (https://cwe.mitre.org/data/definitions/444.html).
(bsc#1180554)
* CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
(High) This is a vulnerability in OpenSSL which may be exploited
through Node.js. (bsc#1179491)
- New upstream LTS version 10.23.0:
* deps: upgrade npm to 6.14.8
* n-api:
+ create N-API version 7
+ expose napi_build_version variable
This update was imported from the SUSE:SLE-15:Update update project.
Patchnames
openSUSE-2021-65
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs10", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs10 fixes the following issues:\n\n- New upstream LTS version 10.23.1:\n * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS\n implementation. When writing to a TLS enabled socket,\n node::StreamBase::Write calls node::TLSWrap::DoWrite with\n a freshly allocated WriteWrap object as first argument.\n If the DoWrite method does not return an error, this object is\n passed back to the caller as part of a StreamWriteResult structure.\n This may be exploited to corrupt memory leading to a\n Denial of Service or potentially other exploits (bsc#1180553)\n * CVE-2020-8287: HTTP Request Smuggling allow two copies of a\n header field in a http request. For example, two Transfer-Encoding\n header fields. In this case Node.js identifies the first header\n field and ignores the second. This can lead to HTTP Request\n Smuggling (https://cwe.mitre.org/data/definitions/444.html).\n (bsc#1180554)\n * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference\n (High) This is a vulnerability in OpenSSL which may be exploited\n through Node.js. (bsc#1179491)\n\n- New upstream LTS version 10.23.0:\n * deps: upgrade npm to 6.14.8\n * n-api:\n + create N-API version 7\n + expose napi_build_version variable\n\nThis update was imported from the SUSE:SLE-15:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-65", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0065-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:0065-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3MAV3V72VVUTVO6VC6SN5XB5EYX3TJWK/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:0065-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3MAV3V72VVUTVO6VC6SN5XB5EYX3TJWK/" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE Bug 1180553", "url": "https://bugzilla.suse.com/1180553" }, { "category": "self", "summary": "SUSE Bug 1180554", "url": "https://bugzilla.suse.com/1180554" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8265 page", "url": "https://www.suse.com/security/cve/CVE-2020-8265/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8287 page", "url": "https://www.suse.com/security/cve/CVE-2020-8287/" } ], "title": "Security update for nodejs10", "tracking": { "current_release_date": "2021-01-15T09:23:23Z", "generator": { "date": "2021-01-15T09:23:23Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:0065-1", "initial_release_date": "2021-01-15T09:23:23Z", "revision_history": [ { "date": "2021-01-15T09:23:23Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "nodejs10-10.23.1-lp152.2.9.1.i586", "product": { "name": "nodejs10-10.23.1-lp152.2.9.1.i586", "product_id": "nodejs10-10.23.1-lp152.2.9.1.i586" } }, { "category": "product_version", "name": "nodejs10-devel-10.23.1-lp152.2.9.1.i586", "product": { "name": "nodejs10-devel-10.23.1-lp152.2.9.1.i586", "product_id": "nodejs10-devel-10.23.1-lp152.2.9.1.i586" } }, { "category": "product_version", "name": "npm10-10.23.1-lp152.2.9.1.i586", "product": { "name": "npm10-10.23.1-lp152.2.9.1.i586", "product_id": "npm10-10.23.1-lp152.2.9.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "product": { "name": "nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "product_id": "nodejs10-docs-10.23.1-lp152.2.9.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs10-10.23.1-lp152.2.9.1.x86_64", "product": { "name": "nodejs10-10.23.1-lp152.2.9.1.x86_64", "product_id": "nodejs10-10.23.1-lp152.2.9.1.x86_64" } }, { "category": "product_version", "name": "nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "product": { "name": "nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "product_id": "nodejs10-devel-10.23.1-lp152.2.9.1.x86_64" } }, { "category": "product_version", "name": "npm10-10.23.1-lp152.2.9.1.x86_64", "product": { "name": "npm10-10.23.1-lp152.2.9.1.x86_64", "product_id": "npm10-10.23.1-lp152.2.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs10-10.23.1-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586" }, "product_reference": "nodejs10-10.23.1-lp152.2.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-10.23.1-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64" }, "product_reference": "nodejs10-10.23.1-lp152.2.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-devel-10.23.1-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586" }, "product_reference": "nodejs10-devel-10.23.1-lp152.2.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-devel-10.23.1-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64" }, "product_reference": "nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs10-docs-10.23.1-lp152.2.9.1.noarch as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch" }, "product_reference": "nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "npm10-10.23.1-lp152.2.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586" }, "product_reference": "npm10-10.23.1-lp152.2.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "npm10-10.23.1-lp152.2.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" }, "product_reference": "npm10-10.23.1-lp152.2.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:23Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2020-8265", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8265" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8265", "url": "https://www.suse.com/security/cve/CVE-2020-8265" }, { "category": "external", "summary": "SUSE Bug 1180553 for CVE-2020-8265", "url": "https://bugzilla.suse.com/1180553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:23Z", "details": "important" } ], "title": "CVE-2020-8265" }, { "cve": "CVE-2020-8287", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8287" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8287", "url": "https://www.suse.com/security/cve/CVE-2020-8287" }, { "category": "external", "summary": "SUSE Bug 1180554 for CVE-2020-8287", "url": "https://bugzilla.suse.com/1180554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:nodejs10-devel-10.23.1-lp152.2.9.1.x86_64", "openSUSE Leap 15.2:nodejs10-docs-10.23.1-lp152.2.9.1.noarch", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.i586", "openSUSE Leap 15.2:npm10-10.23.1-lp152.2.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:23Z", "details": "moderate" } ], "title": "CVE-2020-8287" } ] }
opensuse-su-2024:11797-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libopenssl-3-devel-3.0.1-1.1 on GA media
Notes
Title of the patch
libopenssl-3-devel-3.0.1-1.1 on GA media
Description of the patch
These are all security issues fixed in the libopenssl-3-devel-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11797
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libopenssl-3-devel-3.0.1-1.1 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libopenssl-3-devel-3.0.1-1.1 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-11797", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11797-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-4044 page", "url": "https://www.suse.com/security/cve/CVE-2021-4044/" } ], "title": "libopenssl-3-devel-3.0.1-1.1 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:11797-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-3.0.1-1.1.aarch64", "product": { "name": "libopenssl-3-devel-3.0.1-1.1.aarch64", "product_id": "libopenssl-3-devel-3.0.1-1.1.aarch64" } }, { "category": "product_version", "name": "libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "product": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "product_id": "libopenssl-3-devel-32bit-3.0.1-1.1.aarch64" } }, { "category": "product_version", "name": "libopenssl3-3.0.1-1.1.aarch64", "product": { "name": "libopenssl3-3.0.1-1.1.aarch64", "product_id": "libopenssl3-3.0.1-1.1.aarch64" } }, { "category": "product_version", "name": "libopenssl3-32bit-3.0.1-1.1.aarch64", "product": { "name": "libopenssl3-32bit-3.0.1-1.1.aarch64", "product_id": "libopenssl3-32bit-3.0.1-1.1.aarch64" } }, { "category": "product_version", "name": "openssl-3-3.0.1-1.1.aarch64", "product": { "name": "openssl-3-3.0.1-1.1.aarch64", "product_id": "openssl-3-3.0.1-1.1.aarch64" } }, { "category": "product_version", "name": "openssl-3-doc-3.0.1-1.1.aarch64", "product": { "name": "openssl-3-doc-3.0.1-1.1.aarch64", "product_id": "openssl-3-doc-3.0.1-1.1.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-3.0.1-1.1.ppc64le", "product": { "name": "libopenssl-3-devel-3.0.1-1.1.ppc64le", "product_id": "libopenssl-3-devel-3.0.1-1.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "product": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "product_id": "libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl3-3.0.1-1.1.ppc64le", "product": { "name": "libopenssl3-3.0.1-1.1.ppc64le", "product_id": "libopenssl3-3.0.1-1.1.ppc64le" } }, { "category": "product_version", "name": "libopenssl3-32bit-3.0.1-1.1.ppc64le", "product": { "name": "libopenssl3-32bit-3.0.1-1.1.ppc64le", "product_id": "libopenssl3-32bit-3.0.1-1.1.ppc64le" } }, { "category": "product_version", "name": "openssl-3-3.0.1-1.1.ppc64le", "product": { "name": "openssl-3-3.0.1-1.1.ppc64le", "product_id": "openssl-3-3.0.1-1.1.ppc64le" } }, { "category": "product_version", "name": "openssl-3-doc-3.0.1-1.1.ppc64le", "product": { "name": "openssl-3-doc-3.0.1-1.1.ppc64le", "product_id": "openssl-3-doc-3.0.1-1.1.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-3.0.1-1.1.s390x", "product": { "name": "libopenssl-3-devel-3.0.1-1.1.s390x", "product_id": "libopenssl-3-devel-3.0.1-1.1.s390x" } }, { "category": "product_version", "name": "libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "product": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "product_id": "libopenssl-3-devel-32bit-3.0.1-1.1.s390x" } }, { "category": "product_version", "name": "libopenssl3-3.0.1-1.1.s390x", "product": { "name": "libopenssl3-3.0.1-1.1.s390x", "product_id": "libopenssl3-3.0.1-1.1.s390x" } }, { "category": "product_version", "name": "libopenssl3-32bit-3.0.1-1.1.s390x", "product": { "name": "libopenssl3-32bit-3.0.1-1.1.s390x", "product_id": "libopenssl3-32bit-3.0.1-1.1.s390x" } }, { "category": "product_version", "name": "openssl-3-3.0.1-1.1.s390x", "product": { "name": "openssl-3-3.0.1-1.1.s390x", "product_id": "openssl-3-3.0.1-1.1.s390x" } }, { "category": "product_version", "name": "openssl-3-doc-3.0.1-1.1.s390x", "product": { "name": "openssl-3-doc-3.0.1-1.1.s390x", "product_id": "openssl-3-doc-3.0.1-1.1.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libopenssl-3-devel-3.0.1-1.1.x86_64", "product": { "name": "libopenssl-3-devel-3.0.1-1.1.x86_64", "product_id": "libopenssl-3-devel-3.0.1-1.1.x86_64" } }, { "category": "product_version", "name": "libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "product": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "product_id": "libopenssl-3-devel-32bit-3.0.1-1.1.x86_64" } }, { "category": "product_version", "name": "libopenssl3-3.0.1-1.1.x86_64", "product": { "name": "libopenssl3-3.0.1-1.1.x86_64", "product_id": "libopenssl3-3.0.1-1.1.x86_64" } }, { "category": "product_version", "name": "libopenssl3-32bit-3.0.1-1.1.x86_64", "product": { "name": "libopenssl3-32bit-3.0.1-1.1.x86_64", "product_id": "libopenssl3-32bit-3.0.1-1.1.x86_64" } }, { "category": "product_version", "name": "openssl-3-3.0.1-1.1.x86_64", "product": { "name": "openssl-3-3.0.1-1.1.x86_64", "product_id": "openssl-3-3.0.1-1.1.x86_64" } }, { "category": "product_version", "name": "openssl-3-doc-3.0.1-1.1.x86_64", "product": { "name": "openssl-3-doc-3.0.1-1.1.x86_64", "product_id": "openssl-3-doc-3.0.1-1.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64" }, "product_reference": "libopenssl-3-devel-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le" }, "product_reference": "libopenssl-3-devel-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x" }, "product_reference": "libopenssl-3-devel-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64" }, "product_reference": "libopenssl-3-devel-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64" }, "product_reference": "libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le" }, "product_reference": "libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x" }, "product_reference": "libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-3-devel-32bit-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64" }, "product_reference": "libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64" }, "product_reference": "libopenssl3-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le" }, "product_reference": "libopenssl3-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x" }, "product_reference": "libopenssl3-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64" }, "product_reference": "libopenssl3-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-32bit-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64" }, "product_reference": "libopenssl3-32bit-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-32bit-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le" }, "product_reference": "libopenssl3-32bit-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-32bit-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x" }, "product_reference": "libopenssl3-32bit-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl3-32bit-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64" }, "product_reference": "libopenssl3-32bit-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64" }, "product_reference": "openssl-3-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le" }, "product_reference": "openssl-3-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x" }, "product_reference": "openssl-3-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64" }, "product_reference": "openssl-3-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-doc-3.0.1-1.1.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64" }, "product_reference": "openssl-3-doc-3.0.1-1.1.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-doc-3.0.1-1.1.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le" }, "product_reference": "openssl-3-doc-3.0.1-1.1.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-doc-3.0.1-1.1.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x" }, "product_reference": "openssl-3-doc-3.0.1-1.1.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-3-doc-3.0.1-1.1.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" }, "product_reference": "openssl-3-doc-3.0.1-1.1.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2021-4044", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2021-4044" } ], "notes": [ { "category": "general", "text": "Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL and will cause an IO function (such as SSL_connect() or SSL_do_handshake()) to not indicate success and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only supposed to be returned by OpenSSL if the application has previously called SSL_CTX_set_cert_verify_callback(). Since most applications do not do this the SSL_ERROR_WANT_RETRY_VERIFY return value from SSL_get_error() will be totally unexpected and applications may not behave correctly as a result. The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses. This issue is made more serious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal error when processing a certificate chain. This will occur where a certificate does not include the Subject Alternative Name extension but where a Certificate Authority has enforced name constraints. This issue can occur even with valid chains. By combining the two issues an attacker could induce incorrect, application dependent behaviour. Fixed in OpenSSL 3.0.1 (Affected 3.0.0).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2021-4044", "url": "https://www.suse.com/security/cve/CVE-2021-4044" }, { "category": "external", "summary": "SUSE Bug 1193740 for CVE-2021-4044", "url": "https://bugzilla.suse.com/1193740" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl-3-devel-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.s390x", "openSUSE Tumbleweed:libopenssl3-32bit-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-3.0.1-1.1.x86_64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.aarch64", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.ppc64le", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.s390x", "openSUSE Tumbleweed:openssl-3-doc-3.0.1-1.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2021-4044" } ] }
opensuse-su-2021:0064-1
Vulnerability from csaf_opensuse
Published
2021-01-15 09:23
Modified
2021-01-15 09:23
Summary
Security update for nodejs12
Notes
Title of the patch
Security update for nodejs12
Description of the patch
This update for nodejs12 fixes the following issues:
- New upstream LTS version 12.20.1:
* CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
implementation. When writing to a TLS enabled socket,
node::StreamBase::Write calls node::TLSWrap::DoWrite with
a freshly allocated WriteWrap object as first argument.
If the DoWrite method does not return an error, this object is
passed back to the caller as part of a StreamWriteResult structure.
This may be exploited to corrupt memory leading to a
Denial of Service or potentially other exploits (bsc#1180553)
* CVE-2020-8287: HTTP Request Smuggling allow two copies of a
header field in a http request. For example, two Transfer-Encoding
header fields. In this case Node.js identifies the first header
field and ignores the second. This can lead to HTTP Request
Smuggling (https://cwe.mitre.org/data/definitions/444.html).
(bsc#1180554)
* CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
(High) This is a vulnerability in OpenSSL which may be exploited
through Node.js. (bsc#1179491)
- New upstream LTS version 12.20.0:
* deps:
+ update llhttp '2.1.2' -> '2.1.3'
+ update uv '1.39.0' -> '1.40.0'
+ update uvwasi '0.0.10' -> '0.0.11'
* fs: add .ref() and .unref() methods to watcher classes
* http: added scheduling option to http agent
* module:
+ exports pattern support
+ named exports for CJS via static analysis
* n-api: add more property defaults (gh#35214)
- New upstream LTS version 12.19.1:
* deps: Denial of Service through DNS request (High).
A Node.js application that allows an attacker to trigger a DNS
request for a host of their choice could trigger a Denial of Service
by getting the application to resolve a DNS record with
a larger number of responses (bsc#1178882, CVE-2020-8277)
- New upstream LTS version 12.19.0:
* crypto: add randomInt function
* deps:
+ upgrade to libuv 1.39.0
+ deps: upgrade npm to 6.14.7
+ deps: upgrade to libuv 1.38.1
* doc: deprecate process.umask() with no arguments
* module:
+ package 'imports' field
+ module: deprecate module.parent
* n-api: create N-API version 7
* zlib: switch to lazy init for zlib streams
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames
openSUSE-2021-64
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for nodejs12", "title": "Title of the patch" }, { "category": "description", "text": "This update for nodejs12 fixes the following issues:\n\n- New upstream LTS version 12.20.1:\n * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS\n implementation. When writing to a TLS enabled socket,\n node::StreamBase::Write calls node::TLSWrap::DoWrite with\n a freshly allocated WriteWrap object as first argument.\n If the DoWrite method does not return an error, this object is\n passed back to the caller as part of a StreamWriteResult structure.\n This may be exploited to corrupt memory leading to a\n Denial of Service or potentially other exploits (bsc#1180553)\n * CVE-2020-8287: HTTP Request Smuggling allow two copies of a\n header field in a http request. For example, two Transfer-Encoding\n header fields. In this case Node.js identifies the first header\n field and ignores the second. This can lead to HTTP Request\n Smuggling (https://cwe.mitre.org/data/definitions/444.html).\n (bsc#1180554)\n * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference\n (High) This is a vulnerability in OpenSSL which may be exploited\n through Node.js. (bsc#1179491)\n\n- New upstream LTS version 12.20.0:\n * deps:\n + update llhttp \u00272.1.2\u0027 -\u003e \u00272.1.3\u0027\n + update uv \u00271.39.0\u0027 -\u003e \u00271.40.0\u0027\n + update uvwasi \u00270.0.10\u0027 -\u003e \u00270.0.11\u0027\n * fs: add .ref() and .unref() methods to watcher classes\n * http: added scheduling option to http agent\n * module:\n + exports pattern support\n + named exports for CJS via static analysis\n * n-api: add more property defaults (gh#35214)\n\n- New upstream LTS version 12.19.1:\n * deps: Denial of Service through DNS request (High).\n A Node.js application that allows an attacker to trigger a DNS\n request for a host of their choice could trigger a Denial of Service\n by getting the application to resolve a DNS record with\n a larger number of responses (bsc#1178882, CVE-2020-8277)\n\n- New upstream LTS version 12.19.0:\n * crypto: add randomInt function\n * deps:\n + upgrade to libuv 1.39.0\n + deps: upgrade npm to 6.14.7\n + deps: upgrade to libuv 1.38.1\n * doc: deprecate process.umask() with no arguments\n * module:\n + package \u0027imports\u0027 field\n + module: deprecate module.parent\n * n-api: create N-API version 7\n * zlib: switch to lazy init for zlib streams\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2021-64", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0064-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2021:0064-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EIIX5B6YLG6I6J4WR546EWZU23BNUSV6/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2021:0064-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EIIX5B6YLG6I6J4WR546EWZU23BNUSV6/" }, { "category": "self", "summary": "SUSE Bug 1178882", "url": "https://bugzilla.suse.com/1178882" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE Bug 1180553", "url": "https://bugzilla.suse.com/1180553" }, { "category": "self", "summary": "SUSE Bug 1180554", "url": "https://bugzilla.suse.com/1180554" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8265 page", "url": "https://www.suse.com/security/cve/CVE-2020-8265/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8277 page", "url": "https://www.suse.com/security/cve/CVE-2020-8277/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-8287 page", "url": "https://www.suse.com/security/cve/CVE-2020-8287/" } ], "title": "Security update for nodejs12", "tracking": { "current_release_date": "2021-01-15T09:23:17Z", "generator": { "date": "2021-01-15T09:23:17Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2021:0064-1", "initial_release_date": "2021-01-15T09:23:17Z", "revision_history": [ { "date": "2021-01-15T09:23:17Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "product": { "name": "nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "product_id": "nodejs12-docs-12.20.1-lp152.3.9.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "nodejs12-12.20.1-lp152.3.9.1.x86_64", "product": { "name": "nodejs12-12.20.1-lp152.3.9.1.x86_64", "product_id": "nodejs12-12.20.1-lp152.3.9.1.x86_64" } }, { "category": "product_version", "name": "nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "product": { "name": "nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "product_id": "nodejs12-devel-12.20.1-lp152.3.9.1.x86_64" } }, { "category": "product_version", "name": "npm12-12.20.1-lp152.3.9.1.x86_64", "product": { "name": "npm12-12.20.1-lp152.3.9.1.x86_64", "product_id": "npm12-12.20.1-lp152.3.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "nodejs12-12.20.1-lp152.3.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64" }, "product_reference": "nodejs12-12.20.1-lp152.3.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs12-devel-12.20.1-lp152.3.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64" }, "product_reference": "nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "nodejs12-docs-12.20.1-lp152.3.9.1.noarch as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch" }, "product_reference": "nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "npm12-12.20.1-lp152.3.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" }, "product_reference": "npm12-12.20.1-lp152.3.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:17Z", "details": "important" } ], "title": "CVE-2020-1971" }, { "cve": "CVE-2020-8265", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8265" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::TLSWrap::DoWrite with a freshly allocated WriteWrap object as first argument. If the DoWrite method does not return an error, this object is passed back to the caller as part of a StreamWriteResult structure. This may be exploited to corrupt memory leading to a Denial of Service or potentially other exploits.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8265", "url": "https://www.suse.com/security/cve/CVE-2020-8265" }, { "category": "external", "summary": "SUSE Bug 1180553 for CVE-2020-8265", "url": "https://bugzilla.suse.com/1180553" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.1, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:17Z", "details": "important" } ], "title": "CVE-2020-8265" }, { "cve": "CVE-2020-8277", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8277" } ], "notes": [ { "category": "general", "text": "A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions \u003c 15.2.1, \u003c 14.15.1, and \u003c 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8277", "url": "https://www.suse.com/security/cve/CVE-2020-8277" }, { "category": "external", "summary": "SUSE Bug 1178882 for CVE-2020-8277", "url": "https://bugzilla.suse.com/1178882" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:17Z", "details": "important" } ], "title": "CVE-2020-8277" }, { "cve": "CVE-2020-8287", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-8287" } ], "notes": [ { "category": "general", "text": "Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies the first header field and ignores the second. This can lead to HTTP Request Smuggling.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2020-8287", "url": "https://www.suse.com/security/cve/CVE-2020-8287" }, { "category": "external", "summary": "SUSE Bug 1180554 for CVE-2020-8287", "url": "https://bugzilla.suse.com/1180554" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:nodejs12-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-devel-12.20.1-lp152.3.9.1.x86_64", "openSUSE Leap 15.2:nodejs12-docs-12.20.1-lp152.3.9.1.noarch", "openSUSE Leap 15.2:npm12-12.20.1-lp152.3.9.1.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2021-01-15T09:23:17Z", "details": "moderate" } ], "title": "CVE-2020-8287" } ] }
opensuse-su-2020:2223-1
Vulnerability from csaf_opensuse
Published
2020-12-10 13:00
Modified
2020-12-10 13:00
Summary
Security update for openssl-1_1
Notes
Title of the patch
Security update for openssl-1_1
Description of the patch
This update for openssl-1_1 fixes the following issues:
- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
This update was imported from the SUSE:SLE-15-SP2:Update update project.
Patchnames
openSUSE-2020-2223
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for openssl-1_1", "title": "Title of the patch" }, { "category": "description", "text": "This update for openssl-1_1 fixes the following issues:\n\t \n- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-2223", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2223-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:2223-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMYUDIGG7RM42AIH4Q3WW4VZGFRAPLQ7/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:2223-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMYUDIGG7RM42AIH4Q3WW4VZGFRAPLQ7/" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" } ], "title": "Security update for openssl-1_1", "tracking": { "current_release_date": "2020-12-10T13:00:09Z", "generator": { "date": "2020-12-10T13:00:09Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:2223-1", "initial_release_date": "2020-12-10T13:00:09Z", "revision_history": [ { "date": "2020-12-10T13:00:09Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "product": { "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "product": { "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "product_id": "libopenssl1_1-1.1.1d-lp152.7.9.1.i586" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "product": { "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1d-lp152.7.9.1.i586", "product": { "name": "openssl-1_1-1.1.1d-lp152.7.9.1.i586", "product_id": "openssl-1_1-1.1.1d-lp152.7.9.1.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch", "product": { "name": "openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch", "product_id": "openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "product_id": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "product": { "name": "openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "product_id": "openssl-1_1-1.1.1d-lp152.7.9.1.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.2", "product": { "name": "openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.2" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586" }, "product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.i586" }, "product_reference": "libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586" }, "product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1d-lp152.7.9.1.i586 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.i586" }, "product_reference": "openssl-1_1-1.1.1d-lp152.7.9.1.i586", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1d-lp152.7.9.1.x86_64 as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.x86_64" }, "product_reference": "openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "relates_to_product_reference": "openSUSE Leap 15.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch as component of openSUSE Leap 15.2", "product_id": "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch" }, "product_reference": "openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch", "relates_to_product_reference": "openSUSE Leap 15.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl-1_1-devel-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl-1_1-devel-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:libopenssl1_1-hmac-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:libopenssl1_1-hmac-32bit-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.i586", "openSUSE Leap 15.2:openssl-1_1-1.1.1d-lp152.7.9.1.x86_64", "openSUSE Leap 15.2:openssl-1_1-doc-1.1.1d-lp152.7.9.1.noarch" ] } ], "threats": [ { "category": "impact", "date": "2020-12-10T13:00:09Z", "details": "important" } ], "title": "CVE-2020-1971" } ] }
opensuse-su-2020:2245-1
Vulnerability from csaf_opensuse
Published
2020-12-14 17:06
Modified
2020-12-14 17:06
Summary
Security update for openssl-1_1
Notes
Title of the patch
Security update for openssl-1_1
Description of the patch
This update for openssl-1_1 fixes the following issues:
- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Patchnames
openSUSE-2020-2245
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Security update for openssl-1_1", "title": "Title of the patch" }, { "category": "description", "text": "This update for openssl-1_1 fixes the following issues:\n\n- CVE-2020-1971: Fixed a null pointer dereference in EDIPARTYNAME (bsc#1179491).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-2020-2245", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2020_2245-1.json" }, { "category": "self", "summary": "URL for openSUSE-SU-2020:2245-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DET3T3KBOIXDZC2VZ5XGHXVGQ54LOAI5/" }, { "category": "self", "summary": "E-Mail link for openSUSE-SU-2020:2245-1", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DET3T3KBOIXDZC2VZ5XGHXVGQ54LOAI5/" }, { "category": "self", "summary": "SUSE Bug 1179491", "url": "https://bugzilla.suse.com/1179491" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" } ], "title": "Security update for openssl-1_1", "tracking": { "current_release_date": "2020-12-14T17:06:59Z", "generator": { "date": "2020-12-14T17:06:59Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2020:2245-1", "initial_release_date": "2020-12-14T17:06:59Z", "revision_history": [ { "date": "2020-12-14T17:06:59Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "product": { "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "product_id": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "product": { "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "product_id": "libopenssl1_1-1.1.0i-lp151.8.12.2.i586" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "product": { "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "product_id": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586" } }, { "category": "product_version", "name": "openssl-1_1-1.1.0i-lp151.8.12.2.i586", "product": { "name": "openssl-1_1-1.1.0i-lp151.8.12.2.i586", "product_id": "openssl-1_1-1.1.0i-lp151.8.12.2.i586" } } ], "category": "architecture", "name": "i586" }, { "branches": [ { "category": "product_version", "name": "openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch", "product": { "name": "openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch", "product_id": "openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch" } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "product_id": "libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64" } }, { "category": "product_version", "name": "openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "product": { "name": "openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "product_id": "openssl-1_1-1.1.0i-lp151.8.12.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Leap 15.1", "product": { "name": "openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1", "product_identification_helper": { "cpe": "cpe:/o:opensuse:leap:15.1" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586" }, "product_reference": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.i586" }, "product_reference": "libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586" }, "product_reference": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.0i-lp151.8.12.2.i586 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.i586" }, "product_reference": "openssl-1_1-1.1.0i-lp151.8.12.2.i586", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.0i-lp151.8.12.2.x86_64 as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.x86_64" }, "product_reference": "openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "relates_to_product_reference": "openSUSE Leap 15.1" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch as component of openSUSE Leap 15.1", "product_id": "openSUSE Leap 15.1:openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch" }, "product_reference": "openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch", "relates_to_product_reference": "openSUSE Leap 15.1" } ] }, "vulnerabilities": [ { "cve": "CVE-2020-1971", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2020-1971" } ], "notes": [ { "category": "general", "text": "The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL\u0027s s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL\u0027s parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch" ] }, "references": [ { "category": "external", "summary": "CVE-2020-1971", "url": "https://www.suse.com/security/cve/CVE-2020-1971" }, { "category": "external", "summary": "SUSE Bug 1179491 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1179491" }, { "category": "external", "summary": "SUSE Bug 1196179 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1196179" }, { "category": "external", "summary": "SUSE Bug 1199303 for CVE-2020-1971", "url": "https://bugzilla.suse.com/1199303" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl-1_1-devel-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:libopenssl1_1-hmac-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.i586", "openSUSE Leap 15.1:openssl-1_1-1.1.0i-lp151.8.12.2.x86_64", "openSUSE Leap 15.1:openssl-1_1-doc-1.1.0i-lp151.8.12.2.noarch" ] } ], "threats": [ { "category": "impact", "date": "2020-12-14T17:06:59Z", "details": "important" } ], "title": "CVE-2020-1971" } ] }
opensuse-su-2024:11127-1
Vulnerability from csaf_opensuse
Published
2024-06-15 00:00
Modified
2024-06-15 00:00
Summary
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
Notes
Title of the patch
libopenssl-1_1-devel-1.1.1l-1.2 on GA media
Description of the patch
These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.
Patchnames
openSUSE-Tumbleweed-2024-11127
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "libopenssl-1_1-devel-1.1.1l-1.2 on GA media", "title": "Title of the patch" }, { "category": "description", "text": "These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.", "title": "Description of the patch" }, { "category": "details", "text": "openSUSE-Tumbleweed-2024-11127", "title": "Patchnames" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "SUSE ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "self", "summary": "URL of this CSAF notice", "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_11127-1.json" }, { "category": "self", "summary": "SUSE CVE CVE-2006-2937 page", "url": "https://www.suse.com/security/cve/CVE-2006-2937/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-2940 page", "url": "https://www.suse.com/security/cve/CVE-2006-2940/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-3738 page", "url": "https://www.suse.com/security/cve/CVE-2006-3738/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-4339 page", "url": "https://www.suse.com/security/cve/CVE-2006-4339/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-4343 page", "url": "https://www.suse.com/security/cve/CVE-2006-4343/" }, { "category": "self", "summary": "SUSE CVE CVE-2006-7250 page", "url": "https://www.suse.com/security/cve/CVE-2006-7250/" }, { "category": "self", "summary": "SUSE CVE CVE-2007-3108 page", "url": "https://www.suse.com/security/cve/CVE-2007-3108/" }, { "category": "self", "summary": "SUSE CVE CVE-2007-5135 page", "url": "https://www.suse.com/security/cve/CVE-2007-5135/" }, { "category": "self", "summary": "SUSE CVE CVE-2008-0891 page", "url": "https://www.suse.com/security/cve/CVE-2008-0891/" }, { "category": "self", "summary": "SUSE CVE CVE-2008-1672 page", "url": "https://www.suse.com/security/cve/CVE-2008-1672/" }, { "category": "self", "summary": "SUSE CVE CVE-2008-5077 page", "url": "https://www.suse.com/security/cve/CVE-2008-5077/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-0590 page", "url": "https://www.suse.com/security/cve/CVE-2009-0590/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-0591 page", "url": "https://www.suse.com/security/cve/CVE-2009-0591/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-0789 page", "url": "https://www.suse.com/security/cve/CVE-2009-0789/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-1377 page", "url": "https://www.suse.com/security/cve/CVE-2009-1377/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-1378 page", "url": "https://www.suse.com/security/cve/CVE-2009-1378/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-1379 page", "url": "https://www.suse.com/security/cve/CVE-2009-1379/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-1386 page", "url": "https://www.suse.com/security/cve/CVE-2009-1386/" }, { "category": "self", "summary": "SUSE CVE CVE-2009-1387 page", "url": "https://www.suse.com/security/cve/CVE-2009-1387/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-0740 page", "url": "https://www.suse.com/security/cve/CVE-2010-0740/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-0742 page", "url": "https://www.suse.com/security/cve/CVE-2010-0742/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-1633 page", "url": "https://www.suse.com/security/cve/CVE-2010-1633/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-2939 page", "url": "https://www.suse.com/security/cve/CVE-2010-2939/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-3864 page", "url": "https://www.suse.com/security/cve/CVE-2010-3864/" }, { "category": "self", "summary": "SUSE CVE CVE-2010-5298 page", "url": "https://www.suse.com/security/cve/CVE-2010-5298/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-0014 page", "url": "https://www.suse.com/security/cve/CVE-2011-0014/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-3207 page", "url": "https://www.suse.com/security/cve/CVE-2011-3207/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4108 page", "url": "https://www.suse.com/security/cve/CVE-2011-4108/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4576 page", "url": "https://www.suse.com/security/cve/CVE-2011-4576/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4577 page", "url": "https://www.suse.com/security/cve/CVE-2011-4577/" }, { "category": "self", "summary": "SUSE CVE CVE-2011-4619 page", "url": "https://www.suse.com/security/cve/CVE-2011-4619/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-0027 page", "url": "https://www.suse.com/security/cve/CVE-2012-0027/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-0050 page", "url": "https://www.suse.com/security/cve/CVE-2012-0050/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-0884 page", "url": "https://www.suse.com/security/cve/CVE-2012-0884/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-1165 page", "url": "https://www.suse.com/security/cve/CVE-2012-1165/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-2110 page", "url": "https://www.suse.com/security/cve/CVE-2012-2110/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-2686 page", "url": "https://www.suse.com/security/cve/CVE-2012-2686/" }, { "category": "self", "summary": "SUSE CVE CVE-2012-4929 page", "url": "https://www.suse.com/security/cve/CVE-2012-4929/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0166 page", "url": "https://www.suse.com/security/cve/CVE-2013-0166/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-0169 page", "url": "https://www.suse.com/security/cve/CVE-2013-0169/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-4353 page", "url": "https://www.suse.com/security/cve/CVE-2013-4353/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6449 page", "url": "https://www.suse.com/security/cve/CVE-2013-6449/" }, { "category": "self", "summary": "SUSE CVE CVE-2013-6450 page", "url": "https://www.suse.com/security/cve/CVE-2013-6450/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0076 page", "url": "https://www.suse.com/security/cve/CVE-2014-0076/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0160 page", "url": "https://www.suse.com/security/cve/CVE-2014-0160/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0195 page", "url": "https://www.suse.com/security/cve/CVE-2014-0195/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0198 page", "url": "https://www.suse.com/security/cve/CVE-2014-0198/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0221 page", "url": "https://www.suse.com/security/cve/CVE-2014-0221/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-0224 page", "url": "https://www.suse.com/security/cve/CVE-2014-0224/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3470 page", "url": "https://www.suse.com/security/cve/CVE-2014-3470/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3505 page", "url": "https://www.suse.com/security/cve/CVE-2014-3505/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3506 page", "url": "https://www.suse.com/security/cve/CVE-2014-3506/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3507 page", "url": "https://www.suse.com/security/cve/CVE-2014-3507/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3508 page", "url": "https://www.suse.com/security/cve/CVE-2014-3508/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3509 page", "url": "https://www.suse.com/security/cve/CVE-2014-3509/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3510 page", "url": "https://www.suse.com/security/cve/CVE-2014-3510/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3511 page", "url": "https://www.suse.com/security/cve/CVE-2014-3511/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3512 page", "url": "https://www.suse.com/security/cve/CVE-2014-3512/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3513 page", "url": "https://www.suse.com/security/cve/CVE-2014-3513/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3567 page", "url": "https://www.suse.com/security/cve/CVE-2014-3567/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3568 page", "url": "https://www.suse.com/security/cve/CVE-2014-3568/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3569 page", "url": "https://www.suse.com/security/cve/CVE-2014-3569/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3570 page", "url": "https://www.suse.com/security/cve/CVE-2014-3570/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3571 page", "url": "https://www.suse.com/security/cve/CVE-2014-3571/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-3572 page", "url": "https://www.suse.com/security/cve/CVE-2014-3572/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-5139 page", "url": "https://www.suse.com/security/cve/CVE-2014-5139/" }, { "category": "self", "summary": "SUSE CVE CVE-2014-8275 page", "url": "https://www.suse.com/security/cve/CVE-2014-8275/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0204 page", "url": "https://www.suse.com/security/cve/CVE-2015-0204/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0205 page", "url": "https://www.suse.com/security/cve/CVE-2015-0205/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0206 page", "url": "https://www.suse.com/security/cve/CVE-2015-0206/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0209 page", "url": "https://www.suse.com/security/cve/CVE-2015-0209/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0286 page", "url": "https://www.suse.com/security/cve/CVE-2015-0286/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0287 page", "url": "https://www.suse.com/security/cve/CVE-2015-0287/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0288 page", "url": "https://www.suse.com/security/cve/CVE-2015-0288/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0289 page", "url": "https://www.suse.com/security/cve/CVE-2015-0289/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-0293 page", "url": "https://www.suse.com/security/cve/CVE-2015-0293/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1788 page", "url": "https://www.suse.com/security/cve/CVE-2015-1788/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1789 page", "url": "https://www.suse.com/security/cve/CVE-2015-1789/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1790 page", "url": "https://www.suse.com/security/cve/CVE-2015-1790/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1791 page", "url": "https://www.suse.com/security/cve/CVE-2015-1791/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1792 page", "url": "https://www.suse.com/security/cve/CVE-2015-1792/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1793 page", "url": "https://www.suse.com/security/cve/CVE-2015-1793/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-1794 page", "url": "https://www.suse.com/security/cve/CVE-2015-1794/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3193 page", "url": "https://www.suse.com/security/cve/CVE-2015-3193/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3194 page", "url": "https://www.suse.com/security/cve/CVE-2015-3194/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3195 page", "url": "https://www.suse.com/security/cve/CVE-2015-3195/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3196 page", "url": "https://www.suse.com/security/cve/CVE-2015-3196/" }, { "category": "self", "summary": "SUSE CVE CVE-2015-3197 page", "url": "https://www.suse.com/security/cve/CVE-2015-3197/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0701 page", "url": "https://www.suse.com/security/cve/CVE-2016-0701/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0702 page", "url": "https://www.suse.com/security/cve/CVE-2016-0702/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0705 page", "url": "https://www.suse.com/security/cve/CVE-2016-0705/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0797 page", "url": "https://www.suse.com/security/cve/CVE-2016-0797/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0798 page", "url": "https://www.suse.com/security/cve/CVE-2016-0798/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-0800 page", "url": "https://www.suse.com/security/cve/CVE-2016-0800/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2105 page", "url": "https://www.suse.com/security/cve/CVE-2016-2105/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2106 page", "url": "https://www.suse.com/security/cve/CVE-2016-2106/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2107 page", "url": "https://www.suse.com/security/cve/CVE-2016-2107/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2109 page", "url": "https://www.suse.com/security/cve/CVE-2016-2109/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2176 page", "url": "https://www.suse.com/security/cve/CVE-2016-2176/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2177 page", "url": "https://www.suse.com/security/cve/CVE-2016-2177/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2178 page", "url": "https://www.suse.com/security/cve/CVE-2016-2178/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2179 page", "url": "https://www.suse.com/security/cve/CVE-2016-2179/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2180 page", "url": "https://www.suse.com/security/cve/CVE-2016-2180/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2181 page", "url": "https://www.suse.com/security/cve/CVE-2016-2181/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2182 page", "url": "https://www.suse.com/security/cve/CVE-2016-2182/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-2183 page", "url": "https://www.suse.com/security/cve/CVE-2016-2183/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-6302 page", "url": "https://www.suse.com/security/cve/CVE-2016-6302/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-6303 page", "url": "https://www.suse.com/security/cve/CVE-2016-6303/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-6304 page", "url": "https://www.suse.com/security/cve/CVE-2016-6304/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-6306 page", "url": "https://www.suse.com/security/cve/CVE-2016-6306/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-7052 page", "url": "https://www.suse.com/security/cve/CVE-2016-7052/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-7055 page", "url": "https://www.suse.com/security/cve/CVE-2016-7055/" }, { "category": "self", "summary": "SUSE CVE CVE-2016-7056 page", "url": "https://www.suse.com/security/cve/CVE-2016-7056/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-3731 page", "url": "https://www.suse.com/security/cve/CVE-2017-3731/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-3732 page", "url": "https://www.suse.com/security/cve/CVE-2017-3732/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-3735 page", "url": "https://www.suse.com/security/cve/CVE-2017-3735/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-3736 page", "url": "https://www.suse.com/security/cve/CVE-2017-3736/" }, { "category": "self", "summary": "SUSE CVE CVE-2017-3738 page", "url": "https://www.suse.com/security/cve/CVE-2017-3738/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-0732 page", "url": "https://www.suse.com/security/cve/CVE-2018-0732/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-0734 page", "url": "https://www.suse.com/security/cve/CVE-2018-0734/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-0735 page", "url": "https://www.suse.com/security/cve/CVE-2018-0735/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-0737 page", "url": "https://www.suse.com/security/cve/CVE-2018-0737/" }, { "category": "self", "summary": "SUSE CVE CVE-2018-0739 page", "url": "https://www.suse.com/security/cve/CVE-2018-0739/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1543 page", "url": "https://www.suse.com/security/cve/CVE-2019-1543/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1547 page", "url": "https://www.suse.com/security/cve/CVE-2019-1547/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1549 page", "url": "https://www.suse.com/security/cve/CVE-2019-1549/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1551 page", "url": "https://www.suse.com/security/cve/CVE-2019-1551/" }, { "category": "self", "summary": "SUSE CVE CVE-2019-1563 page", "url": "https://www.suse.com/security/cve/CVE-2019-1563/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1967 page", "url": "https://www.suse.com/security/cve/CVE-2020-1967/" }, { "category": "self", "summary": "SUSE CVE CVE-2020-1971 page", "url": "https://www.suse.com/security/cve/CVE-2020-1971/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-23840 page", "url": "https://www.suse.com/security/cve/CVE-2021-23840/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-23841 page", "url": "https://www.suse.com/security/cve/CVE-2021-23841/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3449 page", "url": "https://www.suse.com/security/cve/CVE-2021-3449/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3450 page", "url": "https://www.suse.com/security/cve/CVE-2021-3450/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3711 page", "url": "https://www.suse.com/security/cve/CVE-2021-3711/" }, { "category": "self", "summary": "SUSE CVE CVE-2021-3712 page", "url": "https://www.suse.com/security/cve/CVE-2021-3712/" } ], "title": "libopenssl-1_1-devel-1.1.1l-1.2 on GA media", "tracking": { "current_release_date": "2024-06-15T00:00:00Z", "generator": { "date": "2024-06-15T00:00:00Z", "engine": { "name": "cve-database.git:bin/generate-csaf.pl", "version": "1" } }, "id": "openSUSE-SU-2024:11127-1", "initial_release_date": "2024-06-15T00:00:00Z", "revision_history": [ { "date": "2024-06-15T00:00:00Z", "number": "1", "summary": "Current version" } ], "status": "final", "version": "1" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "product": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "product_id": "libopenssl-1_1-devel-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "product_id": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1l-1.2.aarch64", "product": { "name": "libopenssl1_1-1.1.1l-1.2.aarch64", "product_id": "libopenssl1_1-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "product": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "product_id": "libopenssl1_1-32bit-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "product": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "product_id": "libopenssl1_1-hmac-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1l-1.2.aarch64", "product": { "name": "openssl-1_1-1.1.1l-1.2.aarch64", "product_id": "openssl-1_1-1.1.1l-1.2.aarch64" } }, { "category": "product_version", "name": "openssl-1_1-doc-1.1.1l-1.2.aarch64", "product": { "name": "openssl-1_1-doc-1.1.1l-1.2.aarch64", "product_id": "openssl-1_1-doc-1.1.1l-1.2.aarch64" } } ], "category": "architecture", "name": "aarch64" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "product": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "product_id": "libopenssl-1_1-devel-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "product_id": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1l-1.2.ppc64le", "product": { "name": "libopenssl1_1-1.1.1l-1.2.ppc64le", "product_id": "libopenssl1_1-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "product": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "product_id": "libopenssl1_1-32bit-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "product": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "product_id": "libopenssl1_1-hmac-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1l-1.2.ppc64le", "product": { "name": "openssl-1_1-1.1.1l-1.2.ppc64le", "product_id": "openssl-1_1-1.1.1l-1.2.ppc64le" } }, { "category": "product_version", "name": "openssl-1_1-doc-1.1.1l-1.2.ppc64le", "product": { "name": "openssl-1_1-doc-1.1.1l-1.2.ppc64le", "product_id": "openssl-1_1-doc-1.1.1l-1.2.ppc64le" } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1l-1.2.s390x", "product": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.s390x", "product_id": "libopenssl-1_1-devel-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "product_id": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1l-1.2.s390x", "product": { "name": "libopenssl1_1-1.1.1l-1.2.s390x", "product_id": "libopenssl1_1-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.1l-1.2.s390x", "product": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.s390x", "product_id": "libopenssl1_1-32bit-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1l-1.2.s390x", "product": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.s390x", "product_id": "libopenssl1_1-hmac-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1l-1.2.s390x", "product": { "name": "openssl-1_1-1.1.1l-1.2.s390x", "product_id": "openssl-1_1-1.1.1l-1.2.s390x" } }, { "category": "product_version", "name": "openssl-1_1-doc-1.1.1l-1.2.s390x", "product": { "name": "openssl-1_1-doc-1.1.1l-1.2.s390x", "product_id": "openssl-1_1-doc-1.1.1l-1.2.s390x" } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "product": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "product_id": "libopenssl-1_1-devel-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "product": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "product_id": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-1.1.1l-1.2.x86_64", "product": { "name": "libopenssl1_1-1.1.1l-1.2.x86_64", "product_id": "libopenssl1_1-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "product": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "product_id": "libopenssl1_1-32bit-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "product": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "product_id": "libopenssl1_1-hmac-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "openssl-1_1-1.1.1l-1.2.x86_64", "product": { "name": "openssl-1_1-1.1.1l-1.2.x86_64", "product_id": "openssl-1_1-1.1.1l-1.2.x86_64" } }, { "category": "product_version", "name": "openssl-1_1-doc-1.1.1l-1.2.x86_64", "product": { "name": "openssl-1_1-doc-1.1.1l-1.2.x86_64", "product_id": "openssl-1_1-doc-1.1.1l-1.2.x86_64" } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_name", "name": "openSUSE Tumbleweed", "product": { "name": "openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed", "product_identification_helper": { "cpe": "cpe:/o:opensuse:tumbleweed" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64" }, "product_reference": "libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le" }, "product_reference": "libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x" }, "product_reference": "libopenssl-1_1-devel-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64" }, "product_reference": "libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64" }, "product_reference": "libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64" }, "product_reference": "libopenssl1_1-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le" }, "product_reference": "libopenssl1_1-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x" }, "product_reference": "libopenssl1_1-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64" }, "product_reference": "libopenssl1_1-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64" }, "product_reference": "libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le" }, "product_reference": "libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x" }, "product_reference": "libopenssl1_1-32bit-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-32bit-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64" }, "product_reference": "libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64" }, "product_reference": "libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le" }, "product_reference": "libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x" }, "product_reference": "libopenssl1_1-hmac-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "libopenssl1_1-hmac-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64" }, "product_reference": "libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64" }, "product_reference": "openssl-1_1-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le" }, "product_reference": "openssl-1_1-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x" }, "product_reference": "openssl-1_1-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64" }, "product_reference": "openssl-1_1-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.1l-1.2.aarch64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64" }, "product_reference": "openssl-1_1-doc-1.1.1l-1.2.aarch64", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.1l-1.2.ppc64le as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le" }, "product_reference": "openssl-1_1-doc-1.1.1l-1.2.ppc64le", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.1l-1.2.s390x as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x" }, "product_reference": "openssl-1_1-doc-1.1.1l-1.2.s390x", "relates_to_product_reference": "openSUSE Tumbleweed" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1_1-doc-1.1.1l-1.2.x86_64 as component of openSUSE Tumbleweed", "product_id": "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" }, "product_reference": "openssl-1_1-doc-1.1.1l-1.2.x86_64", "relates_to_product_reference": "openSUSE Tumbleweed" } ] }, "vulnerabilities": [ { "cve": "CVE-2006-2937", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-2937" } ], "notes": [ { "category": "general", "text": "OpenSSL 0.9.7 before 0.9.7l and 0.9.8 before 0.9.8d allows remote attackers to cause a denial of service (infinite loop and memory consumption) via malformed ASN.1 structures that trigger an improperly handled error condition.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-2937", "url": "https://www.suse.com/security/cve/CVE-2006-2937" }, { "category": "external", "summary": "SUSE Bug 202366 for CVE-2006-2937", "url": "https://bugzilla.suse.com/202366" }, { "category": "external", "summary": "SUSE Bug 207635 for CVE-2006-2937", "url": "https://bugzilla.suse.com/207635" }, { "category": "external", "summary": "SUSE Bug 215623 for CVE-2006-2937", "url": "https://bugzilla.suse.com/215623" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2006-2937" }, { "cve": "CVE-2006-2940", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-2940" } ], "notes": [ { "category": "general", "text": "OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) \"public exponent\" or (2) \"public modulus\" values in X.509 certificates that require extra time to process when using RSA signature verification.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-2940", "url": "https://www.suse.com/security/cve/CVE-2006-2940" }, { "category": "external", "summary": "SUSE Bug 202366 for CVE-2006-2940", "url": "https://bugzilla.suse.com/202366" }, { "category": "external", "summary": "SUSE Bug 207635 for CVE-2006-2940", "url": "https://bugzilla.suse.com/207635" }, { "category": "external", "summary": "SUSE Bug 208971 for CVE-2006-2940", "url": "https://bugzilla.suse.com/208971" }, { "category": "external", "summary": "SUSE Bug 215623 for CVE-2006-2940", "url": "https://bugzilla.suse.com/215623" }, { "category": "external", "summary": "SUSE Bug 223040 for CVE-2006-2940", "url": "https://bugzilla.suse.com/223040" }, { "category": "external", "summary": "SUSE Bug 992991 for CVE-2006-2940", "url": "https://bugzilla.suse.com/992991" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2006-2940" }, { "cve": "CVE-2006-3738", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-3738" } ], "notes": [ { "category": "general", "text": "Buffer overflow in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions has unspecified impact and remote attack vectors involving a long list of ciphers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-3738", "url": "https://www.suse.com/security/cve/CVE-2006-3738" }, { "category": "external", "summary": "SUSE Bug 202366 for CVE-2006-3738", "url": "https://bugzilla.suse.com/202366" }, { "category": "external", "summary": "SUSE Bug 215623 for CVE-2006-3738", "url": "https://bugzilla.suse.com/215623" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "critical" } ], "title": "CVE-2006-3738" }, { "cve": "CVE-2006-4339", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-4339" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-4339", "url": "https://www.suse.com/security/cve/CVE-2006-4339" }, { "category": "external", "summary": "SUSE Bug 202366 for CVE-2006-4339", "url": "https://bugzilla.suse.com/202366" }, { "category": "external", "summary": "SUSE Bug 203595 for CVE-2006-4339", "url": "https://bugzilla.suse.com/203595" }, { "category": "external", "summary": "SUSE Bug 206636 for CVE-2006-4339", "url": "https://bugzilla.suse.com/206636" }, { "category": "external", "summary": "SUSE Bug 207635 for CVE-2006-4339", "url": "https://bugzilla.suse.com/207635" }, { "category": "external", "summary": "SUSE Bug 215623 for CVE-2006-4339", "url": "https://bugzilla.suse.com/215623" }, { "category": "external", "summary": "SUSE Bug 218303 for CVE-2006-4339", "url": "https://bugzilla.suse.com/218303" }, { "category": "external", "summary": "SUSE Bug 233584 for CVE-2006-4339", "url": "https://bugzilla.suse.com/233584" }, { "category": "external", "summary": "SUSE Bug 564512 for CVE-2006-4339", "url": "https://bugzilla.suse.com/564512" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2006-4339" }, { "cve": "CVE-2006-4343", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-4343" } ], "notes": [ { "category": "general", "text": "The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-4343", "url": "https://www.suse.com/security/cve/CVE-2006-4343" }, { "category": "external", "summary": "SUSE Bug 202366 for CVE-2006-4343", "url": "https://bugzilla.suse.com/202366" }, { "category": "external", "summary": "SUSE Bug 207635 for CVE-2006-4343", "url": "https://bugzilla.suse.com/207635" }, { "category": "external", "summary": "SUSE Bug 215623 for CVE-2006-4343", "url": "https://bugzilla.suse.com/215623" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2006-4343" }, { "cve": "CVE-2006-7250", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2006-7250" } ], "notes": [ { "category": "general", "text": "The mime_hdr_cmp function in crypto/asn1/asn_mime.c in OpenSSL 0.9.8t and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2006-7250", "url": "https://www.suse.com/security/cve/CVE-2006-7250" }, { "category": "external", "summary": "SUSE Bug 748738 for CVE-2006-7250", "url": "https://bugzilla.suse.com/748738" }, { "category": "external", "summary": "SUSE Bug 883307 for CVE-2006-7250", "url": "https://bugzilla.suse.com/883307" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2006-7250" }, { "cve": "CVE-2007-3108", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2007-3108" } ], "notes": [ { "category": "general", "text": "The BN_from_montgomery function in crypto/bn/bn_mont.c in OpenSSL 0.9.8e and earlier does not properly perform Montgomery multiplication, which might allow local users to conduct a side-channel attack and retrieve RSA private keys.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2007-3108", "url": "https://www.suse.com/security/cve/CVE-2007-3108" }, { "category": "external", "summary": "SUSE Bug 296511 for CVE-2007-3108", "url": "https://bugzilla.suse.com/296511" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2007-3108" }, { "cve": "CVE-2007-5135", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2007-5135" } ], "notes": [ { "category": "general", "text": "Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers to execute arbitrary code via a crafted packet that triggers a one-byte buffer underflow. NOTE: this issue was introduced as a result of a fix for CVE-2006-3738. As of 20071012, it is unknown whether code execution is possible.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2007-5135", "url": "https://www.suse.com/security/cve/CVE-2007-5135" }, { "category": "external", "summary": "SUSE Bug 329208 for CVE-2007-5135", "url": "https://bugzilla.suse.com/329208" }, { "category": "external", "summary": "SUSE Bug 331726 for CVE-2007-5135", "url": "https://bugzilla.suse.com/331726" }, { "category": "external", "summary": "SUSE Bug 363663 for CVE-2007-5135", "url": "https://bugzilla.suse.com/363663" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2007-5135" }, { "cve": "CVE-2008-0891", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2008-0891" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g, when the TLS server name extensions are enabled, allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2008-0891", "url": "https://www.suse.com/security/cve/CVE-2008-0891" }, { "category": "external", "summary": "SUSE Bug 394317 for CVE-2008-0891", "url": "https://bugzilla.suse.com/394317" }, { "category": "external", "summary": "SUSE Bug 404511 for CVE-2008-0891", "url": "https://bugzilla.suse.com/404511" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2008-0891" }, { "cve": "CVE-2008-1672", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2008-1672" } ], "notes": [ { "category": "general", "text": "OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses \"particular cipher suites,\" which triggers a NULL pointer dereference.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2008-1672", "url": "https://www.suse.com/security/cve/CVE-2008-1672" }, { "category": "external", "summary": "SUSE Bug 394317 for CVE-2008-1672", "url": "https://bugzilla.suse.com/394317" }, { "category": "external", "summary": "SUSE Bug 404511 for CVE-2008-1672", "url": "https://bugzilla.suse.com/404511" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2008-1672" }, { "cve": "CVE-2008-5077", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2008-5077" } ], "notes": [ { "category": "general", "text": "OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2008-5077", "url": "https://www.suse.com/security/cve/CVE-2008-5077" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2008-5077", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 465675 for CVE-2008-5077", "url": "https://bugzilla.suse.com/465675" }, { "category": "external", "summary": "SUSE Bug 465676 for CVE-2008-5077", "url": "https://bugzilla.suse.com/465676" }, { "category": "external", "summary": "SUSE Bug 468866 for CVE-2008-5077", "url": "https://bugzilla.suse.com/468866" }, { "category": "external", "summary": "SUSE Bug 470968 for CVE-2008-5077", "url": "https://bugzilla.suse.com/470968" }, { "category": "external", "summary": "SUSE Bug 475108 for CVE-2008-5077", "url": "https://bugzilla.suse.com/475108" }, { "category": "external", "summary": "SUSE Bug 552497 for CVE-2008-5077", "url": "https://bugzilla.suse.com/552497" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2008-5077", "url": "https://bugzilla.suse.com/629905" }, { "category": "external", "summary": "SUSE Bug 708266 for CVE-2008-5077", "url": "https://bugzilla.suse.com/708266" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2008-5077" }, { "cve": "CVE-2009-0590", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-0590" } ], "notes": [ { "category": "general", "text": "The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote attackers to cause a denial of service (invalid memory access and application crash) via vectors that trigger printing of a (1) BMPString or (2) UniversalString with an invalid encoded length.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-0590", "url": "https://www.suse.com/security/cve/CVE-2009-0590" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-0590", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 489641 for CVE-2009-0590", "url": "https://bugzilla.suse.com/489641" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-0590", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-0590" }, { "cve": "CVE-2009-0591", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-0591" } ], "notes": [ { "category": "general", "text": "The CMS_verify function in OpenSSL 0.9.8h through 0.9.8j, when CMS is enabled, does not properly handle errors associated with malformed signed attributes, which allows remote attackers to repudiate a signature that originally appeared to be valid but was actually invalid.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-0591", "url": "https://www.suse.com/security/cve/CVE-2009-0591" }, { "category": "external", "summary": "SUSE Bug 489641 for CVE-2009-0591", "url": "https://bugzilla.suse.com/489641" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-0591", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2009-0591" }, { "cve": "CVE-2009-0789", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-0789" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8k on WIN64 and certain other platforms does not properly handle a malformed ASN.1 structure, which allows remote attackers to cause a denial of service (invalid memory access and application crash) by placing this structure in the public key of a certificate, as demonstrated by an RSA public key.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-0789", "url": "https://www.suse.com/security/cve/CVE-2009-0789" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-0789", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 489641 for CVE-2009-0789", "url": "https://bugzilla.suse.com/489641" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-0789", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2009-0789" }, { "cve": "CVE-2009-1377", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-1377" } ], "notes": [ { "category": "general", "text": "The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allows remote attackers to cause a denial of service (memory consumption) via a large series of \"future epoch\" DTLS records that are buffered in a queue, aka \"DTLS record buffer limitation bug.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-1377", "url": "https://www.suse.com/security/cve/CVE-2009-1377" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-1377", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 504687 for CVE-2009-1377", "url": "https://bugzilla.suse.com/504687" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-1377", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-1377" }, { "cve": "CVE-2009-1378", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-1378" } ], "notes": [ { "category": "general", "text": "Multiple memory leaks in the dtls1_process_out_of_seq_message function in ssl/d1_both.c in OpenSSL 0.9.8k and earlier 0.9.8 versions allow remote attackers to cause a denial of service (memory consumption) via DTLS records that (1) are duplicates or (2) have sequence numbers much greater than current sequence numbers, aka \"DTLS fragment handling memory leak.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-1378", "url": "https://www.suse.com/security/cve/CVE-2009-1378" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-1378", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 504687 for CVE-2009-1378", "url": "https://bugzilla.suse.com/504687" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-1378", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-1378" }, { "cve": "CVE-2009-1379", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-1379" } ], "notes": [ { "category": "general", "text": "Use-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL 1.0.0 Beta 2 allows remote attackers to cause a denial of service (openssl s_client crash) and possibly have unspecified other impact via a DTLS packet, as demonstrated by a packet from a server that uses a crafted server certificate.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-1379", "url": "https://www.suse.com/security/cve/CVE-2009-1379" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-1379", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 504687 for CVE-2009-1379", "url": "https://bugzilla.suse.com/504687" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-1379", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-1379" }, { "cve": "CVE-2009-1386", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-1386" } ], "notes": [ { "category": "general", "text": "ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-1386", "url": "https://www.suse.com/security/cve/CVE-2009-1386" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-1386", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 509031 for CVE-2009-1386", "url": "https://bugzilla.suse.com/509031" }, { "category": "external", "summary": "SUSE Bug 515659 for CVE-2009-1386", "url": "https://bugzilla.suse.com/515659" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-1386", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-1386" }, { "cve": "CVE-2009-1387", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2009-1387" } ], "notes": [ { "category": "general", "text": "The dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in OpenSSL before 1.0.0 Beta 2 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence DTLS handshake message, related to a \"fragment bug.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2009-1387", "url": "https://www.suse.com/security/cve/CVE-2009-1387" }, { "category": "external", "summary": "SUSE Bug 459468 for CVE-2009-1387", "url": "https://bugzilla.suse.com/459468" }, { "category": "external", "summary": "SUSE Bug 509031 for CVE-2009-1387", "url": "https://bugzilla.suse.com/509031" }, { "category": "external", "summary": "SUSE Bug 515659 for CVE-2009-1387", "url": "https://bugzilla.suse.com/515659" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2009-1387", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2009-1387" }, { "cve": "CVE-2010-0740", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-0740" } ], "notes": [ { "category": "general", "text": "The ssl3_get_record function in ssl/s3_pkt.c in OpenSSL 0.9.8f through 0.9.8m allows remote attackers to cause a denial of service (crash) via a malformed record in a TLS connection that triggers a NULL pointer dereference, related to the minor version number. NOTE: some of these details are obtained from third party information.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-0740", "url": "https://www.suse.com/security/cve/CVE-2010-0740" }, { "category": "external", "summary": "SUSE Bug 590833 for CVE-2010-0740", "url": "https://bugzilla.suse.com/590833" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2010-0740", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-0740" }, { "cve": "CVE-2010-0742", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-0742" } ], "notes": [ { "category": "general", "text": "The Cryptographic Message Syntax (CMS) implementation in crypto/cms/cms_asn1.c in OpenSSL before 0.9.8o and 1.x before 1.0.0a does not properly handle structures that contain OriginatorInfo, which allows context-dependent attackers to modify invalid memory locations or conduct double-free attacks, and possibly execute arbitrary code, via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-0742", "url": "https://www.suse.com/security/cve/CVE-2010-0742" }, { "category": "external", "summary": "SUSE Bug 610642 for CVE-2010-0742", "url": "https://bugzilla.suse.com/610642" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2010-0742" }, { "cve": "CVE-2010-1633", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-1633" } ], "notes": [ { "category": "general", "text": "RSA verification recovery in the EVP_PKEY_verify_recover function in OpenSSL 1.x before 1.0.0a, as used by pkeyutl and possibly other applications, returns uninitialized memory upon failure, which might allow context-dependent attackers to bypass intended key requirements or obtain sensitive information via unspecified vectors. NOTE: some of these details are obtained from third party information.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-1633", "url": "https://www.suse.com/security/cve/CVE-2010-1633" }, { "category": "external", "summary": "SUSE Bug 610642 for CVE-2010-1633", "url": "https://bugzilla.suse.com/610642" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-1633" }, { "cve": "CVE-2010-2939", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-2939" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in the ssl3_get_key_exchange function in the OpenSSL client (ssl/s3_clnt.c) in OpenSSL 1.0.0a, 0.9.8, 0.9.7, and possibly other versions, when using ECDH, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted private key with an invalid prime. NOTE: some sources refer to this as a use-after-free issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-2939", "url": "https://www.suse.com/security/cve/CVE-2010-2939" }, { "category": "external", "summary": "SUSE Bug 489641 for CVE-2010-2939", "url": "https://bugzilla.suse.com/489641" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2010-2939", "url": "https://bugzilla.suse.com/629905" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2010-2939" }, { "cve": "CVE-2010-3864", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-3864" } ], "notes": [ { "category": "general", "text": "Multiple race conditions in ssl/t1_lib.c in OpenSSL 0.9.8f through 0.9.8o, 1.0.0, and 1.0.0a, when multi-threading and internal caching are enabled on a TLS server, might allow remote attackers to execute arbitrary code via client data that triggers a heap-based buffer overflow, related to (1) the TLS server name extension and (2) elliptic curve cryptography.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-3864", "url": "https://www.suse.com/security/cve/CVE-2010-3864" }, { "category": "external", "summary": "SUSE Bug 629905 for CVE-2010-3864", "url": "https://bugzilla.suse.com/629905" }, { "category": "external", "summary": "SUSE Bug 651003 for CVE-2010-3864", "url": "https://bugzilla.suse.com/651003" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2010-3864" }, { "cve": "CVE-2010-5298", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2010-5298" } ], "notes": [ { "category": "general", "text": "Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2010-5298", "url": "https://www.suse.com/security/cve/CVE-2010-5298" }, { "category": "external", "summary": "SUSE Bug 873351 for CVE-2010-5298", "url": "https://bugzilla.suse.com/873351" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2010-5298", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 883126 for CVE-2010-5298", "url": "https://bugzilla.suse.com/883126" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2010-5298", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2010-5298", "url": "https://bugzilla.suse.com/915913" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2010-5298" }, { "cve": "CVE-2011-0014", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-0014" } ], "notes": [ { "category": "general", "text": "ssl/t1_lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service (crash), and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access, aka \"OCSP stapling vulnerability.\"", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-0014", "url": "https://www.suse.com/security/cve/CVE-2011-0014" }, { "category": "external", "summary": "SUSE Bug 670526 for CVE-2011-0014", "url": "https://bugzilla.suse.com/670526" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-0014" }, { "cve": "CVE-2011-3207", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-3207" } ], "notes": [ { "category": "general", "text": "crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-3207", "url": "https://www.suse.com/security/cve/CVE-2011-3207" }, { "category": "external", "summary": "SUSE Bug 716143 for CVE-2011-3207", "url": "https://bugzilla.suse.com/716143" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2011-3207", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-3207" }, { "cve": "CVE-2011-4108", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4108" } ], "notes": [ { "category": "general", "text": "The DTLS implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f performs a MAC check only if certain padding is valid, which makes it easier for remote attackers to recover plaintext via a padding oracle attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4108", "url": "https://www.suse.com/security/cve/CVE-2011-4108" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2011-4108", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 742821 for CVE-2011-4108", "url": "https://bugzilla.suse.com/742821" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2011-4108", "url": "https://bugzilla.suse.com/758060" }, { "category": "external", "summary": "SUSE Bug 778825 for CVE-2011-4108", "url": "https://bugzilla.suse.com/778825" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2011-4108", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4108" }, { "cve": "CVE-2011-4576", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4576" } ], "notes": [ { "category": "general", "text": "The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers to obtain sensitive information by decrypting the padding data sent by an SSL peer.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4576", "url": "https://www.suse.com/security/cve/CVE-2011-4576" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2011-4576", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2011-4576", "url": "https://bugzilla.suse.com/758060" }, { "category": "external", "summary": "SUSE Bug 778825 for CVE-2011-4576", "url": "https://bugzilla.suse.com/778825" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2011-4576", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4576" }, { "cve": "CVE-2011-4577", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4577" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4577", "url": "https://www.suse.com/security/cve/CVE-2011-4577" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2011-4577", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2011-4577", "url": "https://bugzilla.suse.com/758060" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2011-4577", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4577" }, { "cve": "CVE-2011-4619", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-4619" } ], "notes": [ { "category": "general", "text": "The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2011-4619", "url": "https://www.suse.com/security/cve/CVE-2011-4619" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2011-4619", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2011-4619", "url": "https://bugzilla.suse.com/758060" }, { "category": "external", "summary": "SUSE Bug 799454 for CVE-2011-4619", "url": "https://bugzilla.suse.com/799454" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2011-4619", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2011-4619" }, { "cve": "CVE-2012-0027", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-0027" } ], "notes": [ { "category": "general", "text": "The GOST ENGINE in OpenSSL before 1.0.0f does not properly handle invalid parameters for the GOST block cipher, which allows remote attackers to cause a denial of service (daemon crash) via crafted data from a TLS client.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-0027", "url": "https://www.suse.com/security/cve/CVE-2012-0027" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2012-0027", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2012-0027", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2012-0027" }, { "cve": "CVE-2012-0050", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-0050" } ], "notes": [ { "category": "general", "text": "OpenSSL 0.9.8s and 1.0.0f does not properly support DTLS applications, which allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an out-of-bounds read. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4108.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-0050", "url": "https://www.suse.com/security/cve/CVE-2012-0050" }, { "category": "external", "summary": "SUSE Bug 739719 for CVE-2012-0050", "url": "https://bugzilla.suse.com/739719" }, { "category": "external", "summary": "SUSE Bug 742821 for CVE-2012-0050", "url": "https://bugzilla.suse.com/742821" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2012-0050", "url": "https://bugzilla.suse.com/758060" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2012-0050" }, { "cve": "CVE-2012-0884", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-0884" } ], "notes": [ { "category": "general", "text": "The implementation of Cryptographic Message Syntax (CMS) and PKCS #7 in OpenSSL before 0.9.8u and 1.x before 1.0.0h does not properly restrict certain oracle behavior, which makes it easier for context-dependent attackers to decrypt data via a Million Message Attack (MMA) adaptive chosen ciphertext attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-0884", "url": "https://www.suse.com/security/cve/CVE-2012-0884" }, { "category": "external", "summary": "SUSE Bug 749210 for CVE-2012-0884", "url": "https://bugzilla.suse.com/749210" }, { "category": "external", "summary": "SUSE Bug 749735 for CVE-2012-0884", "url": "https://bugzilla.suse.com/749735" }, { "category": "external", "summary": "SUSE Bug 751977 for CVE-2012-0884", "url": "https://bugzilla.suse.com/751977" }, { "category": "external", "summary": "SUSE Bug 754640 for CVE-2012-0884", "url": "https://bugzilla.suse.com/754640" }, { "category": "external", "summary": "SUSE Bug 761819 for CVE-2012-0884", "url": "https://bugzilla.suse.com/761819" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2012-0884", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2012-0884" }, { "cve": "CVE-2012-1165", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-1165" } ], "notes": [ { "category": "general", "text": "The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted S/MIME message, a different vulnerability than CVE-2006-7250.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-1165", "url": "https://www.suse.com/security/cve/CVE-2012-1165" }, { "category": "external", "summary": "SUSE Bug 749210 for CVE-2012-1165", "url": "https://bugzilla.suse.com/749210" }, { "category": "external", "summary": "SUSE Bug 749213 for CVE-2012-1165", "url": "https://bugzilla.suse.com/749213" }, { "category": "external", "summary": "SUSE Bug 751946 for CVE-2012-1165", "url": "https://bugzilla.suse.com/751946" }, { "category": "external", "summary": "SUSE Bug 754640 for CVE-2012-1165", "url": "https://bugzilla.suse.com/754640" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2012-1165", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2012-1165" }, { "cve": "CVE-2012-2110", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-2110" } ], "notes": [ { "category": "general", "text": "The asn1_d2i_read_bio function in crypto/asn1/a_d2i_fp.c in OpenSSL before 0.9.8v, 1.0.0 before 1.0.0i, and 1.0.1 before 1.0.1a does not properly interpret integer data, which allows remote attackers to conduct buffer overflow attacks, and cause a denial of service (memory corruption) or possibly have unspecified other impact, via crafted DER data, as demonstrated by an X.509 certificate or an RSA public key.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-2110", "url": "https://www.suse.com/security/cve/CVE-2012-2110" }, { "category": "external", "summary": "SUSE Bug 758060 for CVE-2012-2110", "url": "https://bugzilla.suse.com/758060" }, { "category": "external", "summary": "SUSE Bug 778825 for CVE-2012-2110", "url": "https://bugzilla.suse.com/778825" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2012-2110", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2012-2110" }, { "cve": "CVE-2012-2686", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-2686" } ], "notes": [ { "category": "general", "text": "crypto/evp/e_aes_cbc_hmac_sha1.c in the AES-NI functionality in the TLS 1.1 and 1.2 implementations in OpenSSL 1.0.1 before 1.0.1d allows remote attackers to cause a denial of service (application crash) via crafted CBC data.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-2686", "url": "https://www.suse.com/security/cve/CVE-2012-2686" }, { "category": "external", "summary": "SUSE Bug 802648 for CVE-2012-2686", "url": "https://bugzilla.suse.com/802648" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2012-2686", "url": "https://bugzilla.suse.com/854391" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2012-2686" }, { "cve": "CVE-2012-4929", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2012-4929" } ], "notes": [ { "category": "general", "text": "The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a \"CRIME\" attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2012-4929", "url": "https://www.suse.com/security/cve/CVE-2012-4929" }, { "category": "external", "summary": "SUSE Bug 1011293 for CVE-2012-4929", "url": "https://bugzilla.suse.com/1011293" }, { "category": "external", "summary": "SUSE Bug 779952 for CVE-2012-4929", "url": "https://bugzilla.suse.com/779952" }, { "category": "external", "summary": "SUSE Bug 793420 for CVE-2012-4929", "url": "https://bugzilla.suse.com/793420" }, { "category": "external", "summary": "SUSE Bug 803004 for CVE-2012-4929", "url": "https://bugzilla.suse.com/803004" }, { "category": "external", "summary": "SUSE Bug 847895 for CVE-2012-4929", "url": "https://bugzilla.suse.com/847895" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2012-4929" }, { "cve": "CVE-2013-0166", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0166" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service (NULL pointer dereference and application crash) via an invalid key.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0166", "url": "https://www.suse.com/security/cve/CVE-2013-0166" }, { "category": "external", "summary": "SUSE Bug 802648 for CVE-2013-0166", "url": "https://bugzilla.suse.com/802648" }, { "category": "external", "summary": "SUSE Bug 802746 for CVE-2013-0166", "url": "https://bugzilla.suse.com/802746" }, { "category": "external", "summary": "SUSE Bug 813366 for CVE-2013-0166", "url": "https://bugzilla.suse.com/813366" }, { "category": "external", "summary": "SUSE Bug 821818 for CVE-2013-0166", "url": "https://bugzilla.suse.com/821818" }, { "category": "external", "summary": "SUSE Bug 833408 for CVE-2013-0166", "url": "https://bugzilla.suse.com/833408" }, { "category": "external", "summary": "SUSE Bug 854391 for CVE-2013-0166", "url": "https://bugzilla.suse.com/854391" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2013-0166", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-0166" }, { "cve": "CVE-2013-0169", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-0169" } ], "notes": [ { "category": "general", "text": "The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-0169", "url": "https://www.suse.com/security/cve/CVE-2013-0169" }, { "category": "external", "summary": "SUSE Bug 1070148 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1070148" }, { "category": "external", "summary": "SUSE Bug 1103036 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1103036" }, { "category": "external", "summary": "SUSE Bug 1103597 for CVE-2013-0169", "url": "https://bugzilla.suse.com/1103597" }, { "category": "external", "summary": "SUSE Bug 802184 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802184" }, { "category": "external", "summary": "SUSE Bug 802648 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802648" }, { "category": "external", "summary": "SUSE Bug 802746 for CVE-2013-0169", "url": "https://bugzilla.suse.com/802746" }, { "category": "external", "summary": "SUSE Bug 803379 for CVE-2013-0169", "url": "https://bugzilla.suse.com/803379" }, { "category": "external", "summary": "SUSE Bug 804654 for CVE-2013-0169", "url": "https://bugzilla.suse.com/804654" }, { "category": "external", "summary": "SUSE Bug 809839 for CVE-2013-0169", "url": "https://bugzilla.suse.com/809839" }, { "category": "external", "summary": "SUSE Bug 813366 for CVE-2013-0169", "url": "https://bugzilla.suse.com/813366" }, { "category": "external", "summary": "SUSE Bug 813939 for CVE-2013-0169", "url": "https://bugzilla.suse.com/813939" }, { "category": "external", "summary": "SUSE Bug 821818 for CVE-2013-0169", "url": "https://bugzilla.suse.com/821818" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2013-0169", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 977584 for CVE-2013-0169", "url": "https://bugzilla.suse.com/977584" }, { "category": "external", "summary": "SUSE Bug 977616 for CVE-2013-0169", "url": "https://bugzilla.suse.com/977616" }, { "category": "external", "summary": "SUSE Bug 984977 for CVE-2013-0169", "url": "https://bugzilla.suse.com/984977" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2013-0169" }, { "cve": "CVE-2013-4353", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-4353" } ], "notes": [ { "category": "general", "text": "The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next Protocol Negotiation record in a TLS handshake.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-4353", "url": "https://www.suse.com/security/cve/CVE-2013-4353" }, { "category": "external", "summary": "SUSE Bug 857640 for CVE-2013-4353", "url": "https://bugzilla.suse.com/857640" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-4353" }, { "cve": "CVE-2013-6449", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6449" } ], "notes": [ { "category": "general", "text": "The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (daemon crash) via crafted traffic from a TLS 1.2 client.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6449", "url": "https://www.suse.com/security/cve/CVE-2013-6449" }, { "category": "external", "summary": "SUSE Bug 856687 for CVE-2013-6449", "url": "https://bugzilla.suse.com/856687" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-6449" }, { "cve": "CVE-2013-6450", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2013-6450" } ], "notes": [ { "category": "general", "text": "The DTLS retransmission implementation in OpenSSL 1.0.0 before 1.0.0l and 1.0.1 before 1.0.1f does not properly maintain data structures for digest and encryption contexts, which might allow man-in-the-middle attackers to trigger the use of a different context and cause a denial of service (application crash) by interfering with packet delivery, related to ssl/d1_both.c and ssl/t1_enc.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2013-6450", "url": "https://www.suse.com/security/cve/CVE-2013-6450" }, { "category": "external", "summary": "SUSE Bug 857203 for CVE-2013-6450", "url": "https://bugzilla.suse.com/857203" }, { "category": "external", "summary": "SUSE Bug 861384 for CVE-2013-6450", "url": "https://bugzilla.suse.com/861384" }, { "category": "external", "summary": "SUSE Bug 986238 for CVE-2013-6450", "url": "https://bugzilla.suse.com/986238" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2013-6450" }, { "cve": "CVE-2014-0076", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0076" } ], "notes": [ { "category": "general", "text": "The Montgomery ladder implementation in OpenSSL through 1.0.0l does not ensure that certain swap operations have a constant-time behavior, which makes it easier for local users to obtain ECDSA nonces via a FLUSH+RELOAD cache side-channel attack.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0076", "url": "https://www.suse.com/security/cve/CVE-2014-0076" }, { "category": "external", "summary": "SUSE Bug 869945 for CVE-2014-0076", "url": "https://bugzilla.suse.com/869945" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-0076", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 883126 for CVE-2014-0076", "url": "https://bugzilla.suse.com/883126" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-0076", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-0076", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "low" } ], "title": "CVE-2014-0076" }, { "cve": "CVE-2014-0160", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0160" } ], "notes": [ { "category": "general", "text": "The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0160", "url": "https://www.suse.com/security/cve/CVE-2014-0160" }, { "category": "external", "summary": "SUSE Bug 872299 for CVE-2014-0160", "url": "https://bugzilla.suse.com/872299" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-0160" }, { "cve": "CVE-2014-0195", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0195" } ], "notes": [ { "category": "general", "text": "The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS ClientHello messages, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via a long non-initial fragment.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0195", "url": "https://www.suse.com/security/cve/CVE-2014-0195" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-0195", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-0195", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2014-0195", "url": "https://bugzilla.suse.com/915913" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-0195" }, { "cve": "CVE-2014-0198", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0198" } ], "notes": [ { "category": "general", "text": "The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive calls, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors that trigger an alert condition.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0198", "url": "https://www.suse.com/security/cve/CVE-2014-0198" }, { "category": "external", "summary": "SUSE Bug 876282 for CVE-2014-0198", "url": "https://bugzilla.suse.com/876282" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-0198", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-0198", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2014-0198", "url": "https://bugzilla.suse.com/915913" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-0198" }, { "cve": "CVE-2014-0221", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0221" } ], "notes": [ { "category": "general", "text": "The dtls1_get_message_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h allows remote attackers to cause a denial of service (recursion and client crash) via a DTLS hello message in an invalid DTLS handshake.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0221", "url": "https://www.suse.com/security/cve/CVE-2014-0221" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-0221", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 883126 for CVE-2014-0221", "url": "https://bugzilla.suse.com/883126" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-0221", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-0221", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2014-0221", "url": "https://bugzilla.suse.com/915913" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-0221" }, { "cve": "CVE-2014-0224", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-0224" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the \"CCS Injection\" vulnerability.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-0224", "url": "https://www.suse.com/security/cve/CVE-2014-0224" }, { "category": "external", "summary": "SUSE Bug 1146657 for CVE-2014-0224", "url": "https://bugzilla.suse.com/1146657" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-0224", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 881743 for CVE-2014-0224", "url": "https://bugzilla.suse.com/881743" }, { "category": "external", "summary": "SUSE Bug 883126 for CVE-2014-0224", "url": "https://bugzilla.suse.com/883126" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-0224", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 892403 for CVE-2014-0224", "url": "https://bugzilla.suse.com/892403" }, { "category": "external", "summary": "SUSE Bug 901237 for CVE-2014-0224", "url": "https://bugzilla.suse.com/901237" }, { "category": "external", "summary": "SUSE Bug 903703 for CVE-2014-0224", "url": "https://bugzilla.suse.com/903703" }, { "category": "external", "summary": "SUSE Bug 905018 for CVE-2014-0224", "url": "https://bugzilla.suse.com/905018" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-0224", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 914447 for CVE-2014-0224", "url": "https://bugzilla.suse.com/914447" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2014-0224", "url": "https://bugzilla.suse.com/915913" }, { "category": "external", "summary": "SUSE Bug 916239 for CVE-2014-0224", "url": "https://bugzilla.suse.com/916239" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-0224" }, { "cve": "CVE-2014-3470", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3470" } ], "notes": [ { "category": "general", "text": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3470", "url": "https://www.suse.com/security/cve/CVE-2014-3470" }, { "category": "external", "summary": "SUSE Bug 880891 for CVE-2014-3470", "url": "https://bugzilla.suse.com/880891" }, { "category": "external", "summary": "SUSE Bug 883126 for CVE-2014-3470", "url": "https://bugzilla.suse.com/883126" }, { "category": "external", "summary": "SUSE Bug 885777 for CVE-2014-3470", "url": "https://bugzilla.suse.com/885777" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3470", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 915913 for CVE-2014-3470", "url": "https://bugzilla.suse.com/915913" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3470" }, { "cve": "CVE-2014-3505", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3505" } ], "notes": [ { "category": "general", "text": "Double free vulnerability in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (application crash) via crafted DTLS packets that trigger an error condition.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3505", "url": "https://www.suse.com/security/cve/CVE-2014-3505" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3505", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890764 for CVE-2014-3505", "url": "https://bugzilla.suse.com/890764" }, { "category": "external", "summary": "SUSE Bug 890767 for CVE-2014-3505", "url": "https://bugzilla.suse.com/890767" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3505", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3505" }, { "cve": "CVE-2014-3506", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3506" } ], "notes": [ { "category": "general", "text": "d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via crafted DTLS handshake messages that trigger memory allocations corresponding to large length values.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3506", "url": "https://www.suse.com/security/cve/CVE-2014-3506" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3506", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890764 for CVE-2014-3506", "url": "https://bugzilla.suse.com/890764" }, { "category": "external", "summary": "SUSE Bug 890768 for CVE-2014-3506", "url": "https://bugzilla.suse.com/890768" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3506", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3506" }, { "cve": "CVE-2014-3507", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3507" } ], "notes": [ { "category": "general", "text": "Memory leak in d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers to cause a denial of service (memory consumption) via zero-length DTLS fragments that trigger improper handling of the return value of a certain insert function.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3507", "url": "https://www.suse.com/security/cve/CVE-2014-3507" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3507", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890764 for CVE-2014-3507", "url": "https://bugzilla.suse.com/890764" }, { "category": "external", "summary": "SUSE Bug 890769 for CVE-2014-3507", "url": "https://bugzilla.suse.com/890769" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3507", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3507" }, { "cve": "CVE-2014-3508", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3508" } ], "notes": [ { "category": "general", "text": "The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i, when pretty printing is used, does not ensure the presence of \u0027\\0\u0027 characters, which allows context-dependent attackers to obtain sensitive information from process stack memory by reading output from X509_name_oneline, X509_name_print_ex, and unspecified other functions.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3508", "url": "https://www.suse.com/security/cve/CVE-2014-3508" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3508", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890764 for CVE-2014-3508", "url": "https://bugzilla.suse.com/890764" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3508", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 950708 for CVE-2014-3508", "url": "https://bugzilla.suse.com/950708" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3508" }, { "cve": "CVE-2014-3509", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3509" } ], "notes": [ { "category": "general", "text": "Race condition in the ssl_parse_serverhello_tlsext function in t1_lib.c in OpenSSL 1.0.0 before 1.0.0n and 1.0.1 before 1.0.1i, when multithreading and session resumption are used, allows remote SSL servers to cause a denial of service (memory overwrite and client application crash) or possibly have unspecified other impact by sending Elliptic Curve (EC) Supported Point Formats Extension data.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3509", "url": "https://www.suse.com/security/cve/CVE-2014-3509" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3509", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890766 for CVE-2014-3509", "url": "https://bugzilla.suse.com/890766" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3509" }, { "cve": "CVE-2014-3510", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3510" } ], "notes": [ { "category": "general", "text": "The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote DTLS servers to cause a denial of service (NULL pointer dereference and client application crash) via a crafted handshake message in conjunction with a (1) anonymous DH or (2) anonymous ECDH ciphersuite.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3510", "url": "https://www.suse.com/security/cve/CVE-2014-3510" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3510", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890764 for CVE-2014-3510", "url": "https://bugzilla.suse.com/890764" }, { "category": "external", "summary": "SUSE Bug 890770 for CVE-2014-3510", "url": "https://bugzilla.suse.com/890770" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3510", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3510" }, { "cve": "CVE-2014-3511", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3511" } ], "notes": [ { "category": "general", "text": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 1.0.1 before 1.0.1i allows man-in-the-middle attackers to force the use of TLS 1.0 by triggering ClientHello message fragmentation in communication between a client and server that both support later TLS versions, related to a \"protocol downgrade\" issue.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3511", "url": "https://www.suse.com/security/cve/CVE-2014-3511" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3511", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890771 for CVE-2014-3511", "url": "https://bugzilla.suse.com/890771" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3511" }, { "cve": "CVE-2014-3512", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3512" } ], "notes": [ { "category": "general", "text": "Multiple buffer overflows in crypto/srp/srp_lib.c in the SRP implementation in OpenSSL 1.0.1 before 1.0.1i allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid SRP (1) g, (2) A, or (3) B parameter.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3512", "url": "https://www.suse.com/security/cve/CVE-2014-3512" }, { "category": "external", "summary": "SUSE Bug 890759 for CVE-2014-3512", "url": "https://bugzilla.suse.com/890759" }, { "category": "external", "summary": "SUSE Bug 890772 for CVE-2014-3512", "url": "https://bugzilla.suse.com/890772" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3512" }, { "cve": "CVE-2014-3513", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3513" } ], "notes": [ { "category": "general", "text": "Memory leak in d1_srtp.c in the DTLS SRTP extension in OpenSSL 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted handshake message.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3513", "url": "https://www.suse.com/security/cve/CVE-2014-3513" }, { "category": "external", "summary": "SUSE Bug 901277 for CVE-2014-3513", "url": "https://bugzilla.suse.com/901277" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "scores": [ { "cvss_v3": { "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "products": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3513" }, { "cve": "CVE-2014-3567", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3567" } ], "notes": [ { "category": "general", "text": "Memory leak in the tls_decrypt_ticket function in t1_lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service (memory consumption) via a crafted session ticket that triggers an integrity-check failure.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3567", "url": "https://www.suse.com/security/cve/CVE-2014-3567" }, { "category": "external", "summary": "SUSE Bug 877506 for CVE-2014-3567", "url": "https://bugzilla.suse.com/877506" }, { "category": "external", "summary": "SUSE Bug 901277 for CVE-2014-3567", "url": "https://bugzilla.suse.com/901277" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3567", "url": "https://bugzilla.suse.com/905106" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "important" } ], "title": "CVE-2014-3567" }, { "cve": "CVE-2014-3568", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3568" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3568", "url": "https://www.suse.com/security/cve/CVE-2014-3568" }, { "category": "external", "summary": "SUSE Bug 901277 for CVE-2014-3568", "url": "https://bugzilla.suse.com/901277" }, { "category": "external", "summary": "SUSE Bug 905106 for CVE-2014-3568", "url": "https://bugzilla.suse.com/905106" }, { "category": "external", "summary": "SUSE Bug 911399 for CVE-2014-3568", "url": "https://bugzilla.suse.com/911399" }, { "category": "external", "summary": "SUSE Bug 986238 for CVE-2014-3568", "url": "https://bugzilla.suse.com/986238" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3568" }, { "cve": "CVE-2014-3569", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3569" } ], "notes": [ { "category": "general", "text": "The ssl23_get_client_hello function in s23_srvr.c in OpenSSL 0.9.8zc, 1.0.0o, and 1.0.1j does not properly handle attempts to use unsupported protocols, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an unexpected handshake, as demonstrated by an SSLv3 handshake to a no-ssl3 application with certain error handling. NOTE: this issue became relevant after the CVE-2014-3568 fix.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3569", "url": "https://www.suse.com/security/cve/CVE-2014-3569" }, { "category": "external", "summary": "SUSE Bug 911399 for CVE-2014-3569", "url": "https://bugzilla.suse.com/911399" }, { "category": "external", "summary": "SUSE Bug 927623 for CVE-2014-3569", "url": "https://bugzilla.suse.com/927623" }, { "category": "external", "summary": "SUSE Bug 986238 for CVE-2014-3569", "url": "https://bugzilla.suse.com/986238" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3569" }, { "cve": "CVE-2014-3570", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3570" } ], "notes": [ { "category": "general", "text": "The BN_sqr implementation in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k does not properly calculate the square of a BIGNUM value, which might make it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors, related to crypto/bn/asm/mips.pl, crypto/bn/asm/x86_64-gcc.c, and crypto/bn/bn_asm.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3570", "url": "https://www.suse.com/security/cve/CVE-2014-3570" }, { "category": "external", "summary": "SUSE Bug 912296 for CVE-2014-3570", "url": "https://bugzilla.suse.com/912296" }, { "category": "external", "summary": "SUSE Bug 915848 for CVE-2014-3570", "url": "https://bugzilla.suse.com/915848" }, { "category": "external", "summary": "SUSE Bug 927623 for CVE-2014-3570", "url": "https://bugzilla.suse.com/927623" }, { "category": "external", "summary": "SUSE Bug 937891 for CVE-2014-3570", "url": "https://bugzilla.suse.com/937891" }, { "category": "external", "summary": "SUSE Bug 944456 for CVE-2014-3570", "url": "https://bugzilla.suse.com/944456" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3570" }, { "cve": "CVE-2014-3571", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3571" } ], "notes": [ { "category": "general", "text": "OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DTLS message that is processed with a different read operation for the handshake header than for the handshake body, related to the dtls1_get_record function in d1_pkt.c and the ssl3_read_n function in s3_pkt.c.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] }, "references": [ { "category": "external", "summary": "CVE-2014-3571", "url": "https://www.suse.com/security/cve/CVE-2014-3571" }, { "category": "external", "summary": "SUSE Bug 912294 for CVE-2014-3571", "url": "https://bugzilla.suse.com/912294" }, { "category": "external", "summary": "SUSE Bug 915848 for CVE-2014-3571", "url": "https://bugzilla.suse.com/915848" }, { "category": "external", "summary": "SUSE Bug 927623 for CVE-2014-3571", "url": "https://bugzilla.suse.com/927623" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl1_1-hmac-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:openssl-1_1-doc-1.1.1l-1.2.x86_64" ] } ], "threats": [ { "category": "impact", "date": "2024-06-15T00:00:00Z", "details": "moderate" } ], "title": "CVE-2014-3571" }, { "cve": "CVE-2014-3572", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2014-3572" } ], "notes": [ { "category": "general", "text": "The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct ECDHE-to-ECDH downgrade attacks and trigger a loss of forward secrecy by omitting the ServerKeyExchange message.", "title": "CVE description" } ], "product_status": { "recommended": [ "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.aarch64", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.ppc64le", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.s390x", "openSUSE Tumbleweed:libopenssl-1_1-devel-32bit-1.1.1l-1.2.x86_64", "openSUSE Tumbleweed:libopen