{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2026-45447: fix use-after-free in PKCS7_verify() when SignedData\n digestAlgorithms is an empty ASN.1 SET", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/advisories/2026/clsa-2026_1781209013.json" } ], "tracking": { "current_release_date": "2026-06-24T14:11:58Z", "generator": { "date": "2026-06-24T14:11:58Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1781209013", "initial_release_date": "2026-06-11T20:17:53Z", "revision_history": [ { "date": "2026-06-11T20:17:53Z", "number": "1", "summary": "Initial version" }, { "date": "2026-06-24T14:11:58Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "openssl: Fix of CVE-2026-45447" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els11?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els10?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els8?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els7?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els11?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els11?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els11?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els10?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els9?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els9?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els9?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els8?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els8?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els8?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els7?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els7?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els7?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-2068", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-2068" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-332410.pdf" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2c9c35870601b4a44d86ddbf512b38df38285cfa" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=7a9c027159fe9e1bbc2cd38a8a2914bff0d5abd9" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9639817dac8bbbaa64d09efad7464ccc405527c7" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WZZBKUHQFGSKGNXXKICSRPL7AMVW5M5/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMNWKERPBKOEBNL7CLTTX3ZZCZLH7XA/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220707-0008/", "url": "https://security.netapp.com/advisory/ntap-20220707-0008/" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5169", "url": "https://www.debian.org/security/2022/dsa-5169" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20220621.txt", "url": "https://www.openssl.org/news/secadv/20220621.txt" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2024/Nov/0", "url": "http://seclists.org/fulldisclosure/2024/Nov/0" }, { "category": "external", "summary": "https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis", "url": "https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis" } ], "release_date": "2022-06-21T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-11T20:16:56.620819Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "none_available", "date": "2022-06-21T15:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-1292", "cwe": { "id": "CWE-78", "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')" }, "notes": [ { "category": "description", "text": "The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-1292" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf", "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-953464.pdf" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=1ad73b4d27bd8c1b369a3cd453681d3a4f1bb9b2" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=548d3f280a6e737673f5b61fce24bb100108dfeb" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23", "url": "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=e5fd1728ef4c7a5bf7c7a7163ca60370460a6e23" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html", "url": "https://lists.debian.org/debian-lts-announce/2022/05/msg00019.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VX4KWHPMKYJL6ZLW4M5IU7E5UV5ZWJQU/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNU5M7BXMML26G3GPYKFGQYPQDRSNKDD/" }, { "category": "external", "summary": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0011" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202210-02", "url": "https://security.gentoo.org/glsa/202210-02" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220602-0009/", "url": "https://security.netapp.com/advisory/ntap-20220602-0009/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20220729-0004/", "url": "https://security.netapp.com/advisory/ntap-20220729-0004/" }, { "category": "external", "summary": "https://www.debian.org/security/2022/dsa-5139", "url": "https://www.debian.org/security/2022/dsa-5139" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20220503.txt", "url": "https://www.openssl.org/news/secadv/20220503.txt" }, { "category": "external", "summary": "https://www.oracle.com/security-alerts/cpujul2022.html", "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "category": "external", "summary": "https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis", "url": "https://gitlab.com/fraf0/cve-2022-1292-re_score-analysis" } ], "release_date": "2022-05-03T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-11T20:16:56.620819Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "none_available", "date": "2022-05-03T16:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-0464", "cwe": { "id": "CWE-295", "name": "Improper Certificate Validation" }, "notes": [ { "category": "description", "text": "A security vulnerability has been identified in all supported versions\n\nof OpenSSL related to the verification of X.509 certificate chains\nthat include policy constraints. Attackers may be able to exploit this\nvulnerability by creating a malicious certificate chain that triggers\nexponential use of computational resources, leading to a denial-of-service\n(DoS) attack on affected systems.\n\nPolicy processing is disabled by default but can be enabled by passing\nthe `-policy' argument to the command line utilities or by calling the\n`X509_VERIFY_PARAM_set1_policies()' function.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0464" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2017771e2db3e2b96f89bbe8766c3209f6a99545" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=2dcd4f1e3115f38cefa43e3efbe9b801c27e642e" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=879f7080d7e141f415c79eaa3a8ac4a3dad0348b" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=959c59c7a0164117e7f8366466a32bb1f8d77ff1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00011.html" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202402-08", "url": "https://security.gentoo.org/glsa/202402-08" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240621-0006/", "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "category": "external", "summary": "https://www.couchbase.com/alerts/", "url": "https://www.couchbase.com/alerts/" }, { "category": "external", "summary": "https://www.debian.org/security/2023/dsa-5417", "url": "https://www.debian.org/security/2023/dsa-5417" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20230322.txt", "url": "https://www.openssl.org/news/secadv/20230322.txt" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230406-0006/", "url": "https://security.netapp.com/advisory/ntap-20230406-0006/" } ], "release_date": "2023-03-22T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-11T20:16:56.620819Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "none_available", "date": "2023-03-22T17:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-45447", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "Issue summary: A specially crafted PKCS#7 or S/MIME signed message could\ntrigger a use-after-free during PKCS#7 signature verification.\nImpact summary: A use-after-free may result in process crashes, heap\ncorruption, or potentially remote code execution.\nWhen processing a PKCS#7 or S/MIME signed message, if the SignedData\ndigestAlgorithms field is present as an empty ASN.1 SET, OpenSSL may\nincorrectly free a caller-owned BIO during PKCS7_verify(). A subsequent\nuse of the BIO by the calling application results in a use-after-free\ncondition.\nIn the common case this occurs when the application later calls\nBIO_free() on the BIO originally passed to PKCS7_verify(). Depending\non allocator behavior and application-specific BIO usage patterns, this\nmay result in a crash or other memory corruption. In some application\ncontexts this may potentially be exploitable for remote code execution.\nApplications that process PKCS#7 or S/MIME signed messages using OpenSSL\nPKCS#7 APIs may be affected. Applications using the CMS APIs for this\nprocessing are not affected.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-45447" } ], "release_date": "2026-06-09T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-11T20:16:56.620819Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "none_available", "date": "2026-06-09T17:17:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-0215", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "The public API function BIO_new_NDEF is a helper function used for streaming\nASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the\nSMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by\nend user applications.\n\nThe function receives a BIO from the caller, prepends a new BIO_f_asn1 filter\nBIO onto the front of it to form a BIO chain, and then returns the new head of\nthe BIO chain to the caller. Under certain conditions, for example if a CMS\nrecipient public key is invalid, the new filter BIO is freed and the function\nreturns a NULL result indicating a failure. However, in this case, the BIO chain\nis not properly cleaned up and the BIO passed by the caller still retains\ninternal pointers to the previously freed filter BIO. If the caller then goes on\nto call BIO_pop() on the BIO then a use-after-free will occur. This will most\nlikely result in a crash.\n\n\n\nThis scenario occurs directly in the internal function B64_write_ASN1() which\nmay cause BIO_new_NDEF() to be called and will subsequently call BIO_pop() on\nthe BIO. This internal function is in turn called by the public API functions\nPEM_write_bio_ASN1_stream, PEM_write_bio_CMS_stream, PEM_write_bio_PKCS7_stream,\nSMIME_write_ASN1, SMIME_write_CMS and SMIME_write_PKCS7.\n\nOther public API functions that may be impacted by this include\ni2d_ASN1_bio_stream, BIO_new_CMS, BIO_new_PKCS7, i2d_CMS_bio_stream and\ni2d_PKCS7_bio_stream.\n\nThe OpenSSL cms and smime command line applications are similarly affected.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-0215" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=8818064ce3c3c0f1b740a5aaba2a987e75bfbafd" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9816136fe31d92ace4037d5da5257f763aeeb4eb" }, { "category": "external", "summary": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344", "url": "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=c3829dd8825c654652201e16f8a0a0c46ee3f344" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202402-08", "url": "https://security.gentoo.org/glsa/202402-08" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230427-0007/", "url": "https://security.netapp.com/advisory/ntap-20230427-0007/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20230427-0009/", "url": "https://security.netapp.com/advisory/ntap-20230427-0009/" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20240621-0006/", "url": "https://security.netapp.com/advisory/ntap-20240621-0006/" }, { "category": "external", "summary": "https://www.openssl.org/news/secadv/20230207.txt", "url": "https://www.openssl.org/news/secadv/20230207.txt" }, { "category": "external", "summary": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003", "url": "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0003" } ], "release_date": "2023-02-08T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-06-11T20:16:56.620819Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1781209013" }, { "category": "none_available", "date": "2023-02-08T20:15:00Z", "details": "Affected", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els10.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els7.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els8.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els11.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }