rhsa-2024_0500
Vulnerability from csaf_redhat
Published
2024-01-25 16:49
Modified
2024-09-16 12:46
Summary
Red Hat Security Advisory: openssl security update
Notes
Topic
An update for openssl is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.
Security Fix(es):
* openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Bug Fix(es):
* Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-9.2.z (RHEL-14578, BZ#2153471)
* OpenSSL should provide FIPS-compliant RSA-OAEP (RHEL-14616)
* NIST SP 800-56Arev3 Section 5.6.2.1 - Missing ECDH Public Key Check (RHEL-15992)
* In FIPS mode, OpenSSL must not perform any cryptographic operations when rsa_keygen_pairwise_test fails (RHEL-17110)
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_vex",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for openssl is now available for Red Hat Enterprise Linux 9.2 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: Incorrect cipher key and IV length processing (CVE-2023-5363)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nBug Fix(es):\n\n* Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-9.2.z (RHEL-14578, BZ#2153471)\n* OpenSSL should provide FIPS-compliant RSA-OAEP (RHEL-14616)\n* NIST SP 800-56Arev3 Section 5.6.2.1 - Missing ECDH Public Key Check (RHEL-15992)\n* In FIPS mode, OpenSSL must not perform any cryptographic operations when rsa_keygen_pairwise_test fails (RHEL-17110)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat offerings.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0500",
"url": "https://access.redhat.com/errata/RHSA-2024:0500"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2243839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243839"
},
{
"category": "external",
"summary": "RHEL-14578",
"url": "https://issues.redhat.com/browse/RHEL-14578"
},
{
"category": "external",
"summary": "RHEL-15992",
"url": "https://issues.redhat.com/browse/RHEL-15992"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/data/csaf/v2/advisories/2024/rhsa-2024_0500.json"
}
],
"title": "Red Hat Security Advisory: openssl security update",
"tracking": {
"current_release_date": "2024-09-16T12:46:40+00:00",
"generator": {
"date": "2024-09-16T12:46:40+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "3.33.3"
}
},
"id": "RHSA-2024:0500",
"initial_release_date": "2024-01-25T16:49:02+00:00",
"revision_history": [
{
"date": "2024-01-25T16:49:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-25T16:49:02+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2024-09-16T12:46:40+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.2::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-devel-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-devel-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-perl-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-perl-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-18.el9_2.aarch64",
"product": {
"name": "openssl-libs-1:3.0.7-18.el9_2.aarch64",
"product_id": "openssl-libs-1:3.0.7-18.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=aarch64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"product": {
"name": "openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"product_id": "openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=ppc64le\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-18.el9_2.i686",
"product": {
"name": "openssl-devel-1:3.0.7-18.el9_2.i686",
"product_id": "openssl-devel-1:3.0.7-18.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-18.el9_2.i686",
"product": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.i686",
"product_id": "openssl-debugsource-1:3.0.7-18.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-18.el9_2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"product": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"product_id": "openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-18.el9_2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"product_id": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-18.el9_2?arch=i686\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-18.el9_2.i686",
"product": {
"name": "openssl-libs-1:3.0.7-18.el9_2.i686",
"product_id": "openssl-libs-1:3.0.7-18.el9_2.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=i686\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-devel-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-devel-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-perl-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-perl-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-18.el9_2.x86_64",
"product": {
"name": "openssl-libs-1:3.0.7-18.el9_2.x86_64",
"product_id": "openssl-libs-1:3.0.7-18.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=x86_64\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-devel-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-devel-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-devel-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-devel@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-perl-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-perl-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-perl-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-perl@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debugsource@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-debuginfo@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
},
{
"category": "product_version",
"name": "openssl-libs-1:3.0.7-18.el9_2.s390x",
"product": {
"name": "openssl-libs-1:3.0.7-18.el9_2.s390x",
"product_id": "openssl-libs-1:3.0.7-18.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl-libs@3.0.7-18.el9_2?arch=s390x\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "openssl-1:3.0.7-18.el9_2.src",
"product": {
"name": "openssl-1:3.0.7-18.el9_2.src",
"product_id": "openssl-1:3.0.7-18.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/openssl@3.0.7-18.el9_2?arch=src\u0026epoch=1"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.2)",
"product_id": "AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-devel-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-devel-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-libs-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "openssl-perl-1:3.0.7-18.el9_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
},
"product_reference": "openssl-perl-1:3.0.7-18.el9_2.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Tony Battersby"
],
"organization": "Cybernetics",
"summary": "Acknowledged by upstream."
}
],
"cve": "CVE-2023-5363",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2023-10-13T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2243839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL in how it processes key and initialization vector (IV) lengths. This issue can lead to potential truncation or overruns during the initialization of some symmetric ciphers. A truncation in the IV can result in non-uniqueness, which could result in loss of confidentiality for some cipher modes. Both truncations and overruns of the key and the IV will produce incorrect results and could, in some cases, trigger a memory exception.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Incorrect cipher key and IV length processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The identified bug in the processing of key and initialization vector (IV) lengths within certain symmetric cipher modes poses a moderate severity risk due to its potential impact on data confidentiality and integrity. While the truncation or overreading of key and IV lengths could lead to incorrect cryptographic operations and potential memory exceptions, the probability of exploitation is mitigated by several factors. Firstly, the affected API was recently introduced, limiting its widespread adoption. Secondly, altering key and IV lengths is not a common operation in most cryptographic implementations. Furthermore, the likelihood of vulnerability is reduced by the necessity for both communication peers to be similarly affected for decryption failures to occur, which would likely be detected during testing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-5363"
},
{
"category": "external",
"summary": "RHBZ#2243839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2243839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-5363",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-5363"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-5363",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5363"
},
{
"category": "external",
"summary": "https://www.openssl.org/news/secadv/20231024.txt",
"url": "https://www.openssl.org/news/secadv/20231024.txt"
}
],
"release_date": "2023-10-24T15:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0500"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"AppStream-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"AppStream-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.src",
"BaseOS-9.2.0.Z.EUS:openssl-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-debugsource-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-devel-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.i686",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-libs-debuginfo-1:3.0.7-18.el9_2.x86_64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.aarch64",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.ppc64le",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.s390x",
"BaseOS-9.2.0.Z.EUS:openssl-perl-1:3.0.7-18.el9_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "openssl: Incorrect cipher key and IV length processing"
}
]
}
Loading...