SUSE-SU-2021:1168-1

Vulnerability from csaf_suse - Published: 2021-04-13 12:04 - Updated: 2026-09-20 13:52
Summary
Security update for opensc
Severity
Moderate
Notes
Title of the patch: Security update for opensc
Description of the patch: This update for opensc fixes the following issues: - CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746). - CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747) - CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256) - CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307). - CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809). - CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364). - CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380) - CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).
Patchnames: SUSE-2021-1168,SUSE-SLE-Module-Basesystem-15-SP2-2021-1168,SUSE-SLE-Module-Basesystem-15-SP3-2021-1168
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2019-15945
5.1 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64 —
Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x —
Vendor Fix
Unresolved product id: SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64 —
Vendor Fix
Threats
Impact moderate
CVE-2019-15946
5.1 (Medium)
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2019-19479
4.3 (Medium)
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2019-19480
4.6 (Medium)
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2019-20792
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2020-26570
6.2 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2020-26571
6.2 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
CVE-2020-26572
6.2 (Medium)
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Recommended 36 products, the same list as for CVE-2019-15945
Threats
Impact moderate
References
URL Category
https://www.suse.com/support/security/rating/ external
https://ftp.suse.com/pub/projects/security/csaf/s… self
https://www.suse.com/support/update/announcement/… self
https://lists.suse.com/pipermail/sle-security-upd… self
https://bugzilla.suse.com/1149746 self
https://bugzilla.suse.com/1149747 self
https://bugzilla.suse.com/1158256 self
https://bugzilla.suse.com/1158307 self
https://bugzilla.suse.com/1170809 self
https://bugzilla.suse.com/1177364 self
https://bugzilla.suse.com/1177378 self
https://bugzilla.suse.com/1177380 self
https://www.suse.com/security/cve/CVE-2019-15945/ self
https://www.suse.com/security/cve/CVE-2019-15946/ self
https://www.suse.com/security/cve/CVE-2019-19479/ self
https://www.suse.com/security/cve/CVE-2019-19480/ self
https://www.suse.com/security/cve/CVE-2019-20792/ self
https://www.suse.com/security/cve/CVE-2020-26570/ self
https://www.suse.com/security/cve/CVE-2020-26571/ self
https://www.suse.com/security/cve/CVE-2020-26572/ self
https://www.suse.com/security/cve/CVE-2019-15945 external
https://bugzilla.suse.com/1149746 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2019-15946 external
https://bugzilla.suse.com/1149747 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2019-19479 external
https://bugzilla.suse.com/1158256 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2019-19480 external
https://bugzilla.suse.com/1158307 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2019-20792 external
https://bugzilla.suse.com/1170809 external
https://www.suse.com/security/cve/CVE-2020-26570 external
https://bugzilla.suse.com/1177364 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2020-26571 external
https://bugzilla.suse.com/1177380 external
https://bugzilla.suse.com/1179291 external
https://www.suse.com/security/cve/CVE-2020-26572 external
https://bugzilla.suse.com/1177378 external
https://bugzilla.suse.com/1179291 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for opensc",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for opensc fixes the following issues:\n\t  \n- CVE-2019-15945: Fixed an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string (bsc#1149746).\n- CVE-2019-15946: Fixed an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry (bsc#1149747)\n- CVE-2019-19479: Fixed an incorrect read operation during parsing of a SETCOS file attribute (bsc#1158256)\n- CVE-2019-19480: Fixed an improper free operation in sc_pkcs15_decode_prkdf_entry (bsc#1158307).\n- CVE-2019-20792: Fixed a double free in coolkey_free_private_data (bsc#1170809). \n- CVE-2020-26570: Fixed a buffer overflow in sc_oberthur_read_file (bsc#1177364).\n- CVE-2020-26571: Fixed a stack-based buffer overflow in gemsafe GPK smart card software driver (bsc#1177380)\n- CVE-2020-26572: Fixed a stack-based buffer overflow in tcos_decipher (bsc#1177378).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2021-1168,SUSE-SLE-Module-Basesystem-15-SP2-2021-1168,SUSE-SLE-Module-Basesystem-15-SP3-2021-1168",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_1168-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:1168-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20211168-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:1168-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008621.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149746",
        "url": "https://bugzilla.suse.com/1149746"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1149747",
        "url": "https://bugzilla.suse.com/1149747"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158256",
        "url": "https://bugzilla.suse.com/1158256"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158307",
        "url": "https://bugzilla.suse.com/1158307"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1170809",
        "url": "https://bugzilla.suse.com/1170809"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177364",
        "url": "https://bugzilla.suse.com/1177364"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177378",
        "url": "https://bugzilla.suse.com/1177378"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177380",
        "url": "https://bugzilla.suse.com/1177380"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15945 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15945/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-15946 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-15946/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19479 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19479/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19480 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19480/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-20792 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-20792/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26570 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26570/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26571 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26571/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26572 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26572/"
      }
    ],
    "title": "Security update for opensc",
    "tracking": {
      "current_release_date": "2026-09-20T13:52:45Z",
      "generator": {
        "date": "2021-04-13T12:04:36Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:1168-1",
      "initial_release_date": "2021-04-13T12:04:36Z",
      "revision_history": [
        {
          "date": "2021-04-13T12:04:36Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-20T13:52:45Z",
          "number": "2",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.7.1.aarch64",
                "product": {
                  "name": "opensc-0:0.19.0-3.7.1.aarch64",
                  "product_id": "opensc-0:0.19.0-3.7.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.19.0-3.7.1?arch=aarch64\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-64bit-0:0.19.0-3.7.1.aarch64_ilp32",
                "product": {
                  "name": "opensc-64bit-0:0.19.0-3.7.1.aarch64_ilp32",
                  "product_id": "opensc-64bit-0:0.19.0-3.7.1.aarch64_ilp32",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/opensc-64bit@0.19.0-3.7.1?arch=aarch64_ilp32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.7.1.i586",
                "product": {
                  "name": "opensc-0:0.19.0-3.7.1.i586",
                  "product_id": "opensc-0:0.19.0-3.7.1.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.19.0-3.7.1?arch=i586\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.7.1.ppc64le",
                "product": {
                  "name": "opensc-0:0.19.0-3.7.1.ppc64le",
                  "product_id": "opensc-0:0.19.0-3.7.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.19.0-3.7.1?arch=ppc64le\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.7.1.s390x",
                "product": {
                  "name": "opensc-0:0.19.0-3.7.1.s390x",
                  "product_id": "opensc-0:0.19.0-3.7.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.19.0-3.7.1?arch=s390x\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "opensc-0:0.19.0-3.7.1.x86_64",
                "product": {
                  "name": "opensc-0:0.19.0-3.7.1.x86_64",
                  "product_id": "opensc-0:0.19.0-3.7.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc@0.19.0-3.7.1?arch=x86_64\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "opensc-32bit-0:0.19.0-3.7.1.x86_64",
                "product": {
                  "name": "opensc-32bit-0:0.19.0-3.7.1.x86_64",
                  "product_id": "opensc-32bit-0:0.19.0-3.7.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:opensc-project:opensc:0.19.0:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/opensc-32bit@0.19.0-3.7.1?arch=x86_64\u0026upstream=opensc-0:0.19.0-3.7.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                  "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-basesystem:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server 15 SP2",
                  "product_id": "SUSE Linux Enterprise Server 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 15 SP2",
                  "product_id": "SUSE Linux Enterprise Desktop 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise High Performance Computing 15 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise High Performance Computing 15 SP2",
                  "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle_hpc:15:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Server 4.1",
                "product": {
                  "name": "SUSE Manager Server 4.1",
                  "product_id": "SUSE Manager Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 4.1",
                "product": {
                  "name": "SUSE Manager Proxy 4.1",
                  "product_id": "SUSE Manager Proxy 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Retail Branch Server 4.1",
                "product": {
                  "name": "SUSE Manager Retail Branch Server 4.1",
                  "product_id": "SUSE Manager Retail Branch Server 4.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-retail-branch-server:4.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 7",
                "product": {
                  "name": "SUSE Enterprise Storage 7",
                  "product_id": "SUSE Enterprise Storage 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:7"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Retail Branch Server 4.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.aarch64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.ppc64le as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.ppc64le",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.s390x as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.s390x",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "opensc-0:0.19.0-3.7.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP2",
          "product_id": "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64"
        },
        "product_reference": "opensc-0:0.19.0-3.7.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-15945",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15945"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15945",
          "url": "https://www.suse.com/security/cve/CVE-2019-15945"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1149746 for CVE-2019-15945",
          "url": "https://bugzilla.suse.com/1149746"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2019-15945",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15945"
    },
    {
      "cve": "CVE-2019-15946",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-15946"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-15946",
          "url": "https://www.suse.com/security/cve/CVE-2019-15946"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1149747 for CVE-2019-15946",
          "url": "https://bugzilla.suse.com/1149747"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2019-15946",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-15946"
    },
    {
      "cve": "CVE-2019-19479",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19479"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/card-setcos.c has an incorrect read operation during parsing of a SETCOS file attribute.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19479",
          "url": "https://www.suse.com/security/cve/CVE-2019-19479"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158256 for CVE-2019-19479",
          "url": "https://bugzilla.suse.com/1158256"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2019-19479",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19479"
    },
    {
      "cve": "CVE-2019-19480",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19480"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in OpenSC through 0.19.0 and 0.20.x through 0.20.0-rc3. libopensc/pkcs15-prkey.c has an incorrect free operation in sc_pkcs15_decode_prkdf_entry.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19480",
          "url": "https://www.suse.com/security/cve/CVE-2019-19480"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158307 for CVE-2019-19480",
          "url": "https://bugzilla.suse.com/1158307"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2019-19480",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-19480"
    },
    {
      "cve": "CVE-2019-20792",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-20792"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-20792",
          "url": "https://www.suse.com/security/cve/CVE-2019-20792"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1170809 for CVE-2019-20792",
          "url": "https://bugzilla.suse.com/1170809"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-20792"
    },
    {
      "cve": "CVE-2020-26570",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26570"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26570",
          "url": "https://www.suse.com/security/cve/CVE-2020-26570"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177364 for CVE-2020-26570",
          "url": "https://bugzilla.suse.com/1177364"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2020-26570",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26570"
    },
    {
      "cve": "CVE-2020-26571",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26571"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26571",
          "url": "https://www.suse.com/security/cve/CVE-2020-26571"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177380 for CVE-2020-26571",
          "url": "https://bugzilla.suse.com/1177380"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2020-26571",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26571"
    },
    {
      "cve": "CVE-2020-26572",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26572"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
          "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26572",
          "url": "https://www.suse.com/security/cve/CVE-2020-26572"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177378 for CVE-2020-26572",
          "url": "https://bugzilla.suse.com/1177378"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1179291 for CVE-2020-26572",
          "url": "https://bugzilla.suse.com/1179291"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Enterprise Storage 7:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Desktop 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise High Performance Computing 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Module for Basesystem 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 15 SP2:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Proxy 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Retail Branch Server 4.1:opensc-0:0.19.0-3.7.1.x86_64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.aarch64",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.ppc64le",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.s390x",
            "SUSE Manager Server 4.1:opensc-0:0.19.0-3.7.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-13T12:04:36Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26572"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.