{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-45445: AES-OCB IV ignored on EVP_Cipher() path", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1782152259.json" } ], "tracking": { "current_release_date": "2026-06-22T18:19:02Z", "generator": { "date": "2026-06-22T18:19:02Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1782152259", "initial_release_date": "2026-06-22T18:19:02Z", "revision_history": [ { "date": "2026-06-22T18:19:02Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "openssl: Fix of 5 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els18?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els18?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els18?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els18?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els12?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els12?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els12?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els12?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els13?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els13?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els13?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els13?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els4?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els4?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els4?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els4?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els3?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els2?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_id": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@3.0.7-20.el9_2.tuxcare.1.els1?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_id": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@3.0.7-20.el9_2.tuxcare.1.els1?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els18?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els18?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els12?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els12?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els13?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els13?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els11?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els11?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els8?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els8?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els4?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els4?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els3?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els3?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els2?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product_id": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@3.0.7-20.el9_2.tuxcare.1.els1?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product_id": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@3.0.7-20.el9_2.tuxcare.1.els1?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64" }, "product_reference": "openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686" }, "product_reference": "openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64" }, "product_reference": "openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64" }, "product_reference": "openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-7383", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "Issue summary: A signed integer overflow when sizing the destination\nbuffer for Unicode output in ASN1_mbstring_ncopy() can lead to a heap\nbuffer overflow.\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nattacker controlled code execution or other undefined behaviour.\nIn ASN1_mbstring_copy() and ASN1_mbstring_ncopy() the destination\nsize for Unicode output is computed in a signed int: by left shift\nof the input character count for BMPSTRING (UTF-16) and\nUNIVERSALSTRING (UTF-32), and by summing per-character byte counts\nfor UTF8STRING. The calculation overflows when the input reaches\naround 2^30 characters. In the worst case (UNIVERSALSTRING at 2^30\ncharacters) the size wraps to zero, OPENSSL_malloc(1) is called, and\nthe subsequent character copy writes several gigabytes past the\none-byte allocation.\nX.509 certificate processing routes through ASN1_STRING_set_by_NID(),\nwhose DIRSTRING_TYPE mask excludes UNIVERSALSTRING and whose per-NID\nsize limits cap the input length; no network protocol or\ncertificate-handling path in OpenSSL exercises the overflow.\nTriggering the bug requires an application that calls\nASN1_mbstring_copy() or ASN1_mbstring_ncopy() directly, or registers\na custom string type via ASN1_STRING_TABLE_add(), with\nattacker-controlled input on the order of half a gigabyte or more.\nFor these reasons this issue was assigned Low severity.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as the affected code is outside the OpenSSL FIPS module\nboundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "known_affected": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-7383" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-22T18:17:42.500559Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2026-45445", "cwe": { "id": "CWE-1204", "name": "Generation of Weak Initialization Vector (IV)" }, "notes": [ { "category": "description", "text": "Issue summary: When an application drives an AES-OCB context through the\npublic EVP_Cipher() one-shot interface, the application-supplied\ninitialisation vector (IV) is silently discarded.\nImpact summary: Every message encrypted under the same key uses the\nsame effective nonce regardless of the IV supplied by the caller,\nresulting in (key, nonce) reuse and loss of confidentiality. If the\nsame code path is used to compute the authentication tag, the tag\ndepends only on the (key, IV) pair and not on the plaintext or\nciphertext, allowing universal forgery of arbitrary ciphertext from a\nsingle captured message.\nOpenSSL provides two ways to drive a cipher: the documented streaming\ninterface (EVP_CipherUpdate / EVP_CipherFinal_ex) and a lower-level\none-shot, EVP_Cipher(), whose documentation explicitly recommends\nagainst use by applications in favour of EVP_CipherUpdate() and\nEVP_CipherFinal_ex(). The OCB provider's streaming handler flushes\nthe application-supplied IV into the OCB context before processing\ndata; the one-shot handler did not. Every call to EVP_Cipher() on an\nAES-OCB context therefore ran with the all-zero key-derived offset\nstate left by cipher initialisation, regardless of the caller's IV.\nIf EVP_EncryptFinal_ex() is subsequently used to obtain the\nauthentication tag, the deferred IV setup runs at that point and\nclears the running checksum that should have been accumulated over the\nplaintext. The resulting tag is a function of (key, IV) only and\nverifies against any ciphertext produced under the same (key, IV)\npair.\nThe OpenSSL SSL/TLS implementation is not affected: AES-OCB is not a\nTLS cipher suite, and libssl does not call EVP_Cipher() in any case.\nApplications that drive AES-OCB through the documented streaming AEAD\nAPI (EVP_CipherUpdate / EVP_CipherFinal_ex) are not affected. Only\napplications that combine the AES-OCB cipher with the EVP_Cipher()\none-shot API are vulnerable.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4 and 3.0 are not affected by\nthis issue, as AES-OCB is outside the OpenSSL FIPS module boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "known_affected": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-45445" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-22T18:17:42.500559Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 9.1, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Critical" } ] }, { "cve": "CVE-2026-34182", "cwe": { "id": "CWE-130", "name": "Improper Handling of Length Parameter Inconsistency" }, "notes": [ { "category": "description", "text": "Issue Summary: Cryptographic Message Services (CMS) processing fails to perform\nsufficient input validation on the cipher and tag length fields of\nAuthEnvelopedData containers, leading to various potential compromises.\nImpact Summary: Attackers making use of these vulnerabilities may achieve\nkey-equivalent functionality for a given CMS recipient and/or bypass integrity\nvalidation for a given message.\nIn one use case, an attacker may send a CMS message containing\nAuthEnvelopedData with the cipher specified as a non-AEAD cipher. OpenSSL\nerroneously allows this selection, and attempts to decrypt and validate the\nmessage.\nAn on-path attacker who captures one legitimate AES-GCM AuthEnvelopedData\naddressed to the victim can re-emit it with the recipientInfos set left\nbyte-for-byte intact, so the victim's private key still unwraps the genuine CEK\n(the content-encryption key), but with the inner OID rewritten to AES-256-OFB\n(Output Feedback Mode, an unauthenticated keystream mode) and with an\nattacker-chosen IV and ciphertext. The victim initializes AES-256-OFB under the\nreal CEK, never consults the MAC field, and CMS_decrypt() returns success.\nIf the application under attack responds to the attacker with any indicator\nshowing success or failure of the decryption effort, it is possible for the\nattacker to use this as an oracle to obtain key equivalent functionality for the\nCEK used for the chosen recipient of the message.\nIn another use case, an attacker can reduce the tag length of the chosen AEAD\ncipher for a given AuthEnvelopedData container to be a single byte long,\nallowing an attacker to brute force CMS decryption, producing an integrity\nbypass for applications that trust CMS_decrypt() to reject modified content.\nThe FIPS modules are not affected by this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "known_affected": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-34182" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-22T18:17:42.500559Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-45447", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "known_affected": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-45447" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-22T18:17:42.500559Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-42770", "cwe": { "id": "CWE-354", "name": "Improper Validation of Integrity Check Value" }, "notes": [ { "category": "description", "text": "Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42)\npeer key, the peer key is not properly checked for the subgroup membership.\nImpact summary: A malicious peer which presents an X9.42 key carrying the\nvictim's p and g parameters, a forged q = r (a small prime factor of the\ncofactor (p−1)/q_local), and a public value Y of order r can recover the\nvictim's private key after a small number of key exchange attempts.\nWhen EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the\nsubgroup membership check Y^q ≡ 1 (mod p) is performed using the peer's\nown q parameter, not the local key's q. The peer's domain parameters are\nthen matched against the domain parameters of the private key, but the value\nof q is not compared.\nA malicious peer who presents an X9.42 key carrying the victim's p, g,\na forged q = r (a small prime factor of the cofactor), and a public\nvalue Y of order r passes all checks. The shared secret then takes only\nr distinct values, leaking priv mod r. Repeating for each small-prime\nfactor of the cofactor and combining via CRT recovers the full private\nkey (Lim–Lee / small-subgroup-confinement attack).\nThe realistic attack surface is narrow: principally CMP deployments with\nlong-lived RA/CA DHX keys and bespoke enterprise or government applications\nusing X9.42 DHX static keys with interactive protocols and therefore this\nissue was assigned Low severity.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are affected by this\nissue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "known_affected": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-42770" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-22T18:17:42.500559Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1782152259" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els1.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els10.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els11.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els12.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els13.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els2.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els3.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els4.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els8.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "AlmaLinux-9.2:openssl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-devel-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.i686", "AlmaLinux-9.2:openssl-libs-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64", "AlmaLinux-9.2:openssl-perl-1:3.0.7-20.el9_2.tuxcare.1.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }