{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libeverest-3.6.6-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11119",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11119-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8627 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8627/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8628 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8628/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-1182 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-1182/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-5291 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-5291/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-7575 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-7575/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-14032 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-14032/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2784 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2784/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-0487 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-0487/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-0488 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-0488/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-19608 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-19608/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-24119 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-24119/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-45450 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-45450/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-35409 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-35409/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-46393 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-46393/"
      }
    ],
    "title": "libeverest-3.6.6-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-06-25T00:00:00Z",
      "generator": {
        "date": "2026-06-25T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11119-1",
      "initial_release_date": "2026-06-25T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-06-25T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libeverest-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libeverest-3.6.6-1.1.aarch64",
                  "product_id": "libeverest-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libeverest-x86-64-v3-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libeverest-x86-64-v3-3.6.6-1.1.aarch64",
                  "product_id": "libeverest-x86-64-v3-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedcrypto16-3.6.6-1.1.aarch64",
                  "product_id": "libmbedcrypto16-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
                  "product_id": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedtls21-3.6.6-1.1.aarch64",
                  "product_id": "libmbedtls21-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
                  "product_id": "libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedx509-7-3.6.6-1.1.aarch64",
                  "product_id": "libmbedx509-7-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
                  "product_id": "libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libp256m-3.6.6-1.1.aarch64",
                  "product_id": "libp256m-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-x86-64-v3-3.6.6-1.1.aarch64",
                "product": {
                  "name": "libp256m-x86-64-v3-3.6.6-1.1.aarch64",
                  "product_id": "libp256m-x86-64-v3-3.6.6-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "mbedtls-3-devel-3.6.6-1.1.aarch64",
                "product": {
                  "name": "mbedtls-3-devel-3.6.6-1.1.aarch64",
                  "product_id": "mbedtls-3-devel-3.6.6-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libeverest-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libeverest-3.6.6-1.1.ppc64le",
                  "product_id": "libeverest-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
                  "product_id": "libeverest-x86-64-v3-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedcrypto16-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedcrypto16-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedtls21-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedtls21-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedx509-7-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedx509-7-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
                  "product_id": "libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libp256m-3.6.6-1.1.ppc64le",
                  "product_id": "libp256m-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
                  "product_id": "libp256m-x86-64-v3-3.6.6-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "mbedtls-3-devel-3.6.6-1.1.ppc64le",
                "product": {
                  "name": "mbedtls-3-devel-3.6.6-1.1.ppc64le",
                  "product_id": "mbedtls-3-devel-3.6.6-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libeverest-3.6.6-1.1.s390x",
                "product": {
                  "name": "libeverest-3.6.6-1.1.s390x",
                  "product_id": "libeverest-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libeverest-x86-64-v3-3.6.6-1.1.s390x",
                "product": {
                  "name": "libeverest-x86-64-v3-3.6.6-1.1.s390x",
                  "product_id": "libeverest-x86-64-v3-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedcrypto16-3.6.6-1.1.s390x",
                  "product_id": "libmbedcrypto16-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
                  "product_id": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedtls21-3.6.6-1.1.s390x",
                  "product_id": "libmbedtls21-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
                  "product_id": "libmbedtls21-x86-64-v3-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedx509-7-3.6.6-1.1.s390x",
                  "product_id": "libmbedx509-7-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
                "product": {
                  "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
                  "product_id": "libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-3.6.6-1.1.s390x",
                "product": {
                  "name": "libp256m-3.6.6-1.1.s390x",
                  "product_id": "libp256m-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-x86-64-v3-3.6.6-1.1.s390x",
                "product": {
                  "name": "libp256m-x86-64-v3-3.6.6-1.1.s390x",
                  "product_id": "libp256m-x86-64-v3-3.6.6-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "mbedtls-3-devel-3.6.6-1.1.s390x",
                "product": {
                  "name": "mbedtls-3-devel-3.6.6-1.1.s390x",
                  "product_id": "mbedtls-3-devel-3.6.6-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libeverest-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libeverest-3.6.6-1.1.x86_64",
                  "product_id": "libeverest-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libeverest-x86-64-v3-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libeverest-x86-64-v3-3.6.6-1.1.x86_64",
                  "product_id": "libeverest-x86-64-v3-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedcrypto16-3.6.6-1.1.x86_64",
                  "product_id": "libmbedcrypto16-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
                  "product_id": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedtls21-3.6.6-1.1.x86_64",
                  "product_id": "libmbedtls21-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
                  "product_id": "libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedx509-7-3.6.6-1.1.x86_64",
                  "product_id": "libmbedx509-7-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
                  "product_id": "libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libp256m-3.6.6-1.1.x86_64",
                  "product_id": "libp256m-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libp256m-x86-64-v3-3.6.6-1.1.x86_64",
                "product": {
                  "name": "libp256m-x86-64-v3-3.6.6-1.1.x86_64",
                  "product_id": "libp256m-x86-64-v3-3.6.6-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "mbedtls-3-devel-3.6.6-1.1.x86_64",
                "product": {
                  "name": "mbedtls-3-devel-3.6.6-1.1.x86_64",
                  "product_id": "mbedtls-3-devel-3.6.6-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64"
        },
        "product_reference": "libeverest-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libeverest-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x"
        },
        "product_reference": "libeverest-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64"
        },
        "product_reference": "libeverest-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-x86-64-v3-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64"
        },
        "product_reference": "libeverest-x86-64-v3-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-x86-64-v3-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-x86-64-v3-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x"
        },
        "product_reference": "libeverest-x86-64-v3-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libeverest-x86-64-v3-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64"
        },
        "product_reference": "libeverest-x86-64-v3-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedcrypto16-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedcrypto16-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedcrypto16-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedcrypto16-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedtls21-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedtls21-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedtls21-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedtls21-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedx509-7-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedx509-7-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedx509-7-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedx509-7-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64"
        },
        "product_reference": "libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x"
        },
        "product_reference": "libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64"
        },
        "product_reference": "libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64"
        },
        "product_reference": "libp256m-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libp256m-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x"
        },
        "product_reference": "libp256m-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64"
        },
        "product_reference": "libp256m-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-x86-64-v3-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64"
        },
        "product_reference": "libp256m-x86-64-v3-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-x86-64-v3-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le"
        },
        "product_reference": "libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-x86-64-v3-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x"
        },
        "product_reference": "libp256m-x86-64-v3-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libp256m-x86-64-v3-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64"
        },
        "product_reference": "libp256m-x86-64-v3-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mbedtls-3-devel-3.6.6-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64"
        },
        "product_reference": "mbedtls-3-devel-3.6.6-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mbedtls-3-devel-3.6.6-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le"
        },
        "product_reference": "mbedtls-3-devel-3.6.6-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mbedtls-3-devel-3.6.6-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x"
        },
        "product_reference": "mbedtls-3-devel-3.6.6-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mbedtls-3-devel-3.6.6-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        },
        "product_reference": "mbedtls-3-devel-3.6.6-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8627",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8627"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8627",
          "url": "https://www.suse.com/security/cve/CVE-2014-8627"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903672 for CVE-2014-8627",
          "url": "https://bugzilla.suse.com/903672"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8627"
    },
    {
      "cve": "CVE-2014-8628",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8628"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates.  NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8628",
          "url": "https://www.suse.com/security/cve/CVE-2014-8628"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 903672 for CVE-2014-8628",
          "url": "https://bugzilla.suse.com/903672"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8628"
    },
    {
      "cve": "CVE-2015-1182",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-1182"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-1182",
          "url": "https://www.suse.com/security/cve/CVE-2015-1182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 913903 for CVE-2015-1182",
          "url": "https://bugzilla.suse.com/913903"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-1182"
    },
    {
      "cve": "CVE-2015-5291",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-5291"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message.  NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-5291",
          "url": "https://www.suse.com/security/cve/CVE-2015-5291"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 949380 for CVE-2015-5291",
          "url": "https://bugzilla.suse.com/949380"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 989694 for CVE-2015-5291",
          "url": "https://bugzilla.suse.com/989694"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2015-5291"
    },
    {
      "cve": "CVE-2015-7575",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-7575"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-7575",
          "url": "https://www.suse.com/security/cve/CVE-2015-7575"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959888 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/959888"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960402 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/960402"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960996 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/960996"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961280 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961280"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961281 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961281"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961282 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961282"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961283 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961283"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961284 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961284"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961290 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961290"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 961357 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/961357"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 962743 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/962743"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 963937 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/963937"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967521 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/967521"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 981087 for CVE-2015-7575",
          "url": "https://bugzilla.suse.com/981087"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-7575"
    },
    {
      "cve": "CVE-2017-14032",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-14032"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-14032",
          "url": "https://www.suse.com/security/cve/CVE-2017-14032"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1056544 for CVE-2017-14032",
          "url": "https://bugzilla.suse.com/1056544"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-14032"
    },
    {
      "cve": "CVE-2017-2784",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2784"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2784",
          "url": "https://www.suse.com/security/cve/CVE-2017-2784"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1029017 for CVE-2017-2784",
          "url": "https://bugzilla.suse.com/1029017"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2784"
    },
    {
      "cve": "CVE-2018-0487",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-0487"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-0487",
          "url": "https://www.suse.com/security/cve/CVE-2018-0487"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1080826 for CVE-2018-0487",
          "url": "https://bugzilla.suse.com/1080826"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-0487"
    },
    {
      "cve": "CVE-2018-0488",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-0488"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-0488",
          "url": "https://www.suse.com/security/cve/CVE-2018-0488"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1080828 for CVE-2018-0488",
          "url": "https://bugzilla.suse.com/1080828"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-0488"
    },
    {
      "cve": "CVE-2018-19608",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-19608"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-19608",
          "url": "https://www.suse.com/security/cve/CVE-2018-19608"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1118727 for CVE-2018-19608",
          "url": "https://bugzilla.suse.com/1118727"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-19608"
    },
    {
      "cve": "CVE-2021-24119",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-24119"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-24119",
          "url": "https://www.suse.com/security/cve/CVE-2021-24119"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1189589 for CVE-2021-24119",
          "url": "https://bugzilla.suse.com/1189589"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-24119"
    },
    {
      "cve": "CVE-2021-45450",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-45450"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-45450",
          "url": "https://www.suse.com/security/cve/CVE-2021-45450"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1193979 for CVE-2021-45450",
          "url": "https://bugzilla.suse.com/1193979"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2021-45450"
    },
    {
      "cve": "CVE-2022-35409",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-35409"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-35409",
          "url": "https://www.suse.com/security/cve/CVE-2022-35409"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201581 for CVE-2022-35409",
          "url": "https://bugzilla.suse.com/1201581"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-35409"
    },
    {
      "cve": "CVE-2022-46393",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-46393"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and MBEDTLS_SSL_CID_IN_LEN_MAX \u003e 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
          "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-46393",
          "url": "https://www.suse.com/security/cve/CVE-2022-46393"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1206576 for CVE-2022-46393",
          "url": "https://bugzilla.suse.com/1206576"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libeverest-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedcrypto16-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedtls21-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libmbedx509-7-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:libp256m-x86-64-v3-3.6.6-1.1.x86_64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.aarch64",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.ppc64le",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.s390x",
            "openSUSE Tumbleweed:mbedtls-3-devel-3.6.6-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-06-25T00:00:00Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2022-46393"
    }
  ]
}