{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-42764", "tracking": { "current_release_date": "2026-08-19T09:40:20.751051Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-42764", "initial_release_date": "2026-06-09T17:03:30.480601Z", "revision_history": [ { "date": "2026-06-09T17:03:30.480601Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| Products connected (3).| References created (4).| CWES updated (1)." }, { "date": "2026-06-09T17:03:32.912213Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-06-09T17:27:43.685075Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| References created (4).| CWES updated (1)." }, { "date": "2026-06-09T18:48:27.616522Z", "number": "4", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products created (1).| Product Remediations created (1).| Vendor_assessment created." }, { "date": "2026-06-09T18:48:29.372863Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-06-09T21:12:47.563858Z", "number": "6", "summary": "CVSS created.| Unknown change." }, { "date": "2026-06-09T21:12:51.194042Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-06-09T21:26:41.058385Z", "number": "8", "summary": "CVSS created." }, { "date": "2026-06-09T21:26:42.554526Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-06-10T00:47:20.435240Z", "number": "10", "summary": "Source created.| CVE status created. (valid)| Products connected (2)." }, { "date": "2026-06-10T06:44:54.316766Z", "number": "11", "summary": "Description created for source." }, { "date": "2026-06-10T07:00:44.618761Z", "number": "12", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (51).| References created (16)." }, { "date": "2026-06-10T07:04:01.966472Z", "number": "13", "summary": "Source created.| CVE status created. (valid)| Description created for source.| Products connected (28).| Product Identifiers created (24).| References created (4)." }, { "date": "2026-06-10T07:04:08.818423Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-06-10T08:13:26.381539Z", "number": "15", "summary": "Source connected.| CVE status created. (valid)| Products connected (9).| References created (8)." }, { "date": "2026-06-10T08:13:29.028910Z", "number": "16", "summary": "NCSC Score updated." }, { "date": "2026-06-10T08:25:21.344768Z", "number": "17", "summary": "References created (3).| References removed (3)." }, { "date": "2026-06-10T08:38:47.513767Z", "number": "18", "summary": "References created (3).| References removed (3)." }, { "date": "2026-06-10T12:02:12.397996Z", "number": "19", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| References created (1)." }, { "date": "2026-06-10T12:02:19.370411Z", "number": "20", "summary": "NCSC Score updated." }, { "date": "2026-06-10T15:26:25.038915Z", "number": "21", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-06-10T15:26:27.683321Z", "number": "22", "summary": "NCSC Score updated." }, { "date": "2026-06-11T00:28:40.322152Z", "number": "23", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (26).| Product Identifiers created (6).| Product Remediations created (26).| References created (2).| CWES updated (1).| Vendor_assessment created." }, { "date": "2026-06-11T00:28:52.512979Z", "number": "24", "summary": "NCSC Score updated." }, { "date": "2026-06-11T02:41:48.378889Z", "number": "25", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-06-11T11:41:22.370684Z", "number": "26", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-06-11T11:41:30.797591Z", "number": "27", "summary": "NCSC Score updated." }, { "date": "2026-06-11T14:03:51.805950Z", "number": "28", "summary": "CVSS created." }, { "date": "2026-06-11T14:04:01.874246Z", "number": "29", "summary": "NCSC Score updated." }, { "date": "2026-06-12T00:30:24.221634Z", "number": "30", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (9).| Product Remediations created (18).| Product Identifiers created (29).| Product Identifiers removed (29).| References created (21).| CWES updated (1)." }, { "date": "2026-06-12T00:30:34.706796Z", "number": "31", "summary": "NCSC Score updated." }, { "date": "2026-06-12T00:47:29.566223Z", "number": "32", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (9).| Product Remediations created (18).| Product Identifiers created (34).| Product Identifiers removed (34).| References created (21).| CWES updated (1)." }, { "date": "2026-06-12T07:09:06.479336Z", "number": "33", "summary": "Products connected (1).| References created (2)." }, { "date": "2026-06-12T07:09:13.604796Z", "number": "34", "summary": "NCSC Score updated." }, { "date": "2026-06-12T16:41:22.135859Z", "number": "35", "summary": "Description removed for source.| Description created for source." }, { "date": "2026-06-13T12:19:59.621635Z", "number": "36", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| CWES updated (1)." }, { "date": "2026-06-13T12:20:02.144969Z", "number": "37", "summary": "NCSC Score updated." }, { "date": "2026-06-15T04:27:32.662279Z", "number": "38", "summary": "NCSC Score updated." }, { "date": "2026-06-15T08:32:10.330076Z", "number": "39", "summary": "Products connected (1).| References created (3)." }, { "date": "2026-06-15T16:09:06.229271Z", "number": "40", "summary": "EPSS updated." }, { "date": "2026-06-15T16:09:08.698366Z", "number": "41", "summary": "NCSC Score updated." }, { "date": "2026-06-15T19:25:57.358136Z", "number": "42", "summary": "Products connected (3).| Product Identifiers created (3)." }, { "date": "2026-06-15T19:25:59.058887Z", "number": "43", "summary": "NCSC Score updated." }, { "date": "2026-06-16T09:06:30.621693Z", "number": "44", "summary": "Products connected (2).| References created (6)." }, { "date": "2026-06-16T09:06:33.883472Z", "number": "45", "summary": "NCSC Score updated." }, { "date": "2026-06-16T12:19:50.166639Z", "number": "46", "summary": "Products connected (4)." }, { "date": "2026-06-16T12:20:04.216654Z", "number": "47", "summary": "NCSC Score updated." }, { "date": "2026-06-17T09:25:27.562209Z", "number": "48", "summary": "Products connected (1).| References created (11)." }, { "date": "2026-06-17T09:25:34.316166Z", "number": "49", "summary": "NCSC Score updated." }, { "date": "2026-06-17T12:40:10.295258Z", "number": "50", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (6).| Product Remediations created (11).| References created (42).| CWES updated (1)." }, { "date": "2026-06-17T12:40:13.530508Z", "number": "51", "summary": "NCSC Score updated." }, { "date": "2026-06-17T18:47:51.518468Z", "number": "52", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Threats created (3).| References created (2).| Vendor_assessment created." }, { "date": "2026-06-17T18:47:53.893436Z", "number": "53", "summary": "NCSC Score updated." }, { "date": "2026-06-18T09:07:39.187228Z", "number": "54", "summary": "Products connected (2).| References created (3)." }, { "date": "2026-06-18T09:07:44.234590Z", "number": "55", "summary": "NCSC Score updated." }, { "date": "2026-06-19T08:17:54.212480Z", "number": "56", "summary": "References created (1)." }, { "date": "2026-06-23T07:06:55.021445Z", "number": "57", "summary": "Products connected (1).| References created (4)." }, { "date": "2026-06-23T07:07:01.168738Z", "number": "58", "summary": "NCSC Score updated." }, { "date": "2026-06-24T09:08:42.482287Z", "number": "59", "summary": "References created (1)." }, { "date": "2026-06-24T09:08:47.955561Z", "number": "60", "summary": "NCSC Score updated." }, { "date": "2026-06-24T18:51:08.552889Z", "number": "61", "summary": "Product Remediations created (3)." }, { "date": "2026-06-24T18:51:11.785216Z", "number": "62", "summary": "NCSC Score updated." }, { "date": "2026-06-25T00:29:12.296108Z", "number": "63", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Remediations created (6).| Product Identifiers created (4).| Product Identifiers removed (4).| References created (60).| CWES updated (1)." }, { "date": "2026-06-25T00:29:24.279462Z", "number": "64", "summary": "NCSC Score updated." }, { "date": "2026-06-25T10:36:36.612056Z", "number": "65", "summary": "References created (3)." }, { "date": "2026-06-25T10:36:41.146418Z", "number": "66", "summary": "NCSC Score updated." }, { "date": "2026-06-26T01:06:22.327677Z", "number": "67", "summary": "Product Remediations removed (3)." }, { "date": "2026-06-26T01:06:27.871107Z", "number": "68", "summary": "NCSC Score updated." }, { "date": "2026-06-29T10:06:03.458191Z", "number": "69", "summary": "References created (3)." }, { "date": "2026-06-29T10:06:08.076437Z", "number": "70", "summary": "NCSC Score updated." }, { "date": "2026-06-30T01:28:44.406132Z", "number": "71", "summary": "NCSC Score updated." }, { "date": "2026-06-30T07:05:46.774612Z", "number": "72", "summary": "Products connected (1)." }, { "date": "2026-06-30T14:53:52.413172Z", "number": "73", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-06-30T14:53:54.529117Z", "number": "74", "summary": "NCSC Score updated." }, { "date": "2026-06-30T18:45:57.801352Z", "number": "75", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1).| References created (31)." }, { "date": "2026-06-30T18:46:01.509105Z", "number": "76", "summary": "NCSC Score updated." }, { "date": "2026-07-01T20:28:31.593889Z", "number": "77", "summary": "NCSC Score updated." }, { "date": "2026-07-02T01:02:59.875564Z", "number": "78", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (2).| Product Remediations created (4).| Product Identifiers created (2).| Product Identifiers removed (2).| References created (28).| CWES updated (1)." }, { "date": "2026-07-02T11:38:14.518753Z", "number": "79", "summary": "References created (3)." }, { "date": "2026-07-02T11:38:20.135687Z", "number": "80", "summary": "NCSC Score updated." }, { "date": "2026-07-02T18:46:27.425901Z", "number": "81", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (2).| References created (31)." }, { "date": "2026-07-03T10:07:44.176399Z", "number": "82", "summary": "References created (1)." }, { "date": "2026-07-06T08:59:43.421874Z", "number": "83", "summary": "References created (1)." }, { "date": "2026-07-08T06:01:59.451328Z", "number": "84", "summary": "Products created (3).| Products removed (3)." }, { "date": "2026-07-08T06:02:01.204785Z", "number": "85", "summary": "NCSC Score updated." }, { "date": "2026-07-08T08:48:07.711612Z", "number": "86", "summary": "Products connected (1).| References created (4)." }, { "date": "2026-07-08T08:48:13.135358Z", "number": "87", "summary": "NCSC Score updated." }, { "date": "2026-07-09T09:51:28.351952Z", "number": "88", "summary": "References created (1)." }, { "date": "2026-07-09T09:51:38.522275Z", "number": "89", "summary": "NCSC Score updated." }, { "date": "2026-07-13T17:48:39.979115Z", "number": "90", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (16).| References created (6).| CWES updated (1)." }, { "date": "2026-07-13T17:48:48.346039Z", "number": "91", "summary": "NCSC Score updated." }, { "date": "2026-07-14T09:33:51.881827Z", "number": "92", "summary": "References created (3)." }, { "date": "2026-07-14T09:33:56.049568Z", "number": "93", "summary": "NCSC Score updated." }, { "date": "2026-07-14T16:27:33.694450Z", "number": "94", "summary": "NCSC Score updated." }, { "date": "2026-07-15T07:36:28.504740Z", "number": "95", "summary": "Products connected (4).| References created (1)." }, { "date": "2026-07-15T07:36:32.595885Z", "number": "96", "summary": "NCSC Score updated." }, { "date": "2026-07-17T09:49:29.460583Z", "number": "97", "summary": "References created (3)." }, { "date": "2026-07-17T09:49:33.910816Z", "number": "98", "summary": "NCSC Score updated." }, { "date": "2026-07-17T12:53:41.687770Z", "number": "99", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (3).| Product Remediations created (5).| Product Identifiers created (4).| Product Identifiers removed (4).| References created (18).| CWES updated (1)." }, { "date": "2026-07-17T12:53:44.416121Z", "number": "100", "summary": "NCSC Score updated." }, { "date": "2026-07-20T11:14:44.298932Z", "number": "101", "summary": "References created (1)." }, { "date": "2026-07-20T11:14:55.831620Z", "number": "102", "summary": "NCSC Score updated." }, { "date": "2026-07-20T18:48:21.026031Z", "number": "103", "summary": "Product Remediations created (1).| Product Remediations removed (1)." }, { "date": "2026-07-20T18:48:23.255523Z", "number": "104", "summary": "NCSC Score updated." }, { "date": "2026-07-21T12:34:54.111617Z", "number": "105", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-07-21T12:35:01.177560Z", "number": "106", "summary": "NCSC Score updated." }, { "date": "2026-07-22T10:14:07.965697Z", "number": "107", "summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (3)." }, { "date": "2026-07-22T10:14:14.320960Z", "number": "108", "summary": "NCSC Score updated." }, { "date": "2026-07-22T15:23:20.558745Z", "number": "109", "summary": "Products connected (4).| References created (2)." }, { "date": "2026-07-22T15:23:33.719399Z", "number": "110", "summary": "NCSC Score updated." }, { "date": "2026-07-24T09:51:19.889739Z", "number": "111", "summary": "References created (1)." }, { "date": "2026-07-24T09:51:28.883217Z", "number": "112", "summary": "NCSC Score updated." }, { "date": "2026-07-24T14:14:49.675226Z", "number": "113", "summary": "EPSS updated." }, { "date": "2026-07-24T14:14:58.435986Z", "number": "114", "summary": "NCSC Score updated." }, { "date": "2026-07-24T21:29:25.203242Z", "number": "115", "summary": "NCSC Score updated." }, { "date": "2026-07-27T14:40:37.414476Z", "number": "116", "summary": "References created (3)." }, { "date": "2026-07-27T14:40:41.923740Z", "number": "117", "summary": "NCSC Score updated." }, { "date": "2026-07-28T12:07:23.128561Z", "number": "118", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-07-28T12:07:25.321765Z", "number": "119", "summary": "NCSC Score updated." }, { "date": "2026-07-28T15:31:19.019573Z", "number": "120", "summary": "References created (1)." }, { "date": "2026-07-28T21:27:05.065546Z", "number": "121", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| Products connected (1).| Product Identifiers created (1).| Product Identifiers removed (1).| Product Remediations created (1).| References created (2)." }, { "date": "2026-07-28T21:27:09.304259Z", "number": "122", "summary": "NCSC Score updated." }, { "date": "2026-07-29T11:54:31.661642Z", "number": "123", "summary": "References created (1)." }, { "date": "2026-07-30T10:50:56.264510Z", "number": "124", "summary": "Products connected (1).| References created (2)." }, { "date": "2026-07-30T10:50:59.497092Z", "number": "125", "summary": "NCSC Score updated." }, { "date": "2026-07-30T18:28:36.982936Z", "number": "126", "summary": "Description removed for source.| Description created for source." }, { "date": "2026-07-30T18:28:40.481874Z", "number": "127", "summary": "NCSC Score updated." }, { "date": "2026-08-04T10:17:34.576883Z", "number": "128", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-04T10:17:38.947857Z", "number": "129", "summary": "NCSC Score updated." }, { "date": "2026-08-06T10:25:23.528174Z", "number": "130", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-06T10:25:30.262793Z", "number": "131", "summary": "NCSC Score updated." }, { "date": "2026-08-07T18:23:14.288353Z", "number": "132", "summary": "Source connected.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (5).| CWES updated (1)." }, { "date": "2026-08-07T18:23:16.947559Z", "number": "133", "summary": "NCSC Score updated." }, { "date": "2026-08-11T09:08:17.019313Z", "number": "134", "summary": "Products connected (1).| References created (1)." }, { "date": "2026-08-11T09:08:21.654034Z", "number": "135", "summary": "NCSC Score updated." }, { "date": "2026-08-13T00:28:37.319371Z", "number": "136", "summary": "Description removed for source.| Description created for source." }, { "date": "2026-08-15T16:18:25.335944Z", "number": "137", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-08-15T16:19:03.670881Z", "number": "138", "summary": "NCSC Score updated." }, { "date": "2026-08-19T09:39:59.711176Z", "number": "139", "summary": "Source connected.| CVE status created. (valid)" } ], "status": "interim", "version": "139" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/7.2", "product": { "name": "vers:unknown/7.2", "product_id": "CSAFPID-448", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/7.3", "product": { "name": "vers:unknown/7.3", "product_id": "CSAFPID-9499", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.3" } } } ], "category": "product_name", "name": "AIX" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1337765", "product_identification_helper": { "cpe": "cpe:/a:ibm:qradar_siem:-" } } } ], "category": "product_name", "name": "IBM QRadar SIEM" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/operator", "product": { "name": "vers:unknown/operator", "product_id": "CSAFPID-149529", "product_identification_helper": { "cpe": "cpe:/a:ibm:mq:operator" } } } ], "category": "product_name", "name": "MQ" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/4.1", "product": { "name": "vers:unknown/4.1", "product_id": "CSAFPID-123182", "product_identification_helper": { "cpe": "cpe:/a:ibm:vios:4.1" } } } ], "category": "product_name", "name": "VIOS" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/7.3", "product": { "name": "vers:unknown/7.3", "product_id": "CSAFPID-39373", "product_identification_helper": { "cpe": "cpe:/o:ibm:i:7.3" } } }, { "category": "product_version_range", "name": "vers:unknown/7.4", "product": { "name": "vers:unknown/7.4", "product_id": "CSAFPID-39374", "product_identification_helper": { "cpe": "cpe:/o:ibm:i:7.4" } } }, { "category": "product_version_range", "name": "vers:unknown/7.5", "product": { "name": "vers:unknown/7.5", "product_id": "CSAFPID-39376", "product_identification_helper": { "cpe": "cpe:/o:ibm:i:7.5" } } }, { "category": "product_version_range", "name": "vers:unknown/7.6", "product": { "name": "vers:unknown/7.6", "product_id": "CSAFPID-2733624", "product_identification_helper": { "cpe": "cpe:/o:ibm:i:7.6" } } } ], "category": "product_name", "name": "i" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330296", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "product_name", "name": "Amazon Linux 2" } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-5700339", "product_identification_helper": { "cpe": "cpe:/a:redhat:cost_management:4::el9" } } } ], "category": "product_name", "name": "Cost Management 4" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783613222", "product": { "name": "vers:oci/1783613222", "product_id": "CSAFPID-8849290", "product_identification_helper": { "purl": "pkg:oci/costmanagement-metrics-operator-bundle@sha256%3Afa43be2fd285110e13fb4e782479b28a6e59ffc25da384d4aae745b6d70c74c7?arch=amd64&repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-operator-bundle&tag=1783613222" } } } ], "category": "product_name", "name": "costmanagement-metrics-operator-bundle" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1783539156", "product": { "name": "vers:oci/1783539156", "product_id": "CSAFPID-8849289", "product_identification_helper": { "purl": "pkg:oci/costmanagement-metrics-rhel9-operator@sha256%3Ac76ae9a58852c1e1d7b8745e7152ea06548dfcb07c448618d0f22ee01e110ddf?arch=ppc64le&repository_url=registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator&tag=1783539156" } } } ], "category": "product_name", "name": "costmanagement-metrics-rhel9-operator" } ], "category": "product_family", "name": "Cost Management" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/2", "product": { "name": "vers:rpm/2", "product_id": "CSAFPID-2993424", "product_identification_helper": { "cpe": "cpe:/a:redhat:discovery:2::el9" } } } ], "category": "product_name", "name": "Red Hat Discovery 2" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782159791", "product": { "name": "vers:oci/1782159791", "product_id": "CSAFPID-8495367", "product_identification_helper": { "purl": "pkg:oci/discovery-server-rhel9@sha256%3Accd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34?arch=arm64&repository_url=registry.redhat.io/discovery/discovery-server-rhel9&tag=1782159791" } } } ], "category": "product_name", "name": "discovery-server-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782166952", "product": { "name": "vers:oci/1782166952", "product_id": "CSAFPID-8495366", "product_identification_helper": { "purl": "pkg:oci/discovery-ui-rhel9@sha256%3A335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75?arch=arm64&repository_url=registry.redhat.io/discovery/discovery-ui-rhel9&tag=1782166952" } } } ], "category": "product_name", "name": "discovery-ui-rhel9" } ], "category": "product_family", "name": "Red Hat Discovery" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317175", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10", "product": { "name": "vers:rpm/10", "product_id": "CSAFPID-2858634", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/6", "product": { "name": "vers:rpm/6", "product_id": "CSAFPID-1439321", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:6" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/7", "product": { "name": "vers:rpm/7", "product_id": "CSAFPID-1439315", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:7" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/8", "product": { "name": "vers:rpm/8", "product_id": "CSAFPID-1439317", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:8" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1439319", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10.2", "product": { "name": "vers:rpm/10.2", "product_id": "CSAFPID-7372357", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10.2" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1432758", "product_identification_helper": { "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux AppStream (v. 9)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/10.2", "product": { "name": "vers:rpm/10.2", "product_id": "CSAFPID-7372593", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:10.2" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 10)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/9", "product": { "name": "vers:rpm/9", "product_id": "CSAFPID-1432840", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos" } } } ], "category": "product_name", "name": "Red Hat Enterprise Linux BaseOS (v. 9)" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334426", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335249", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334427", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335250", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debuginfo@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-debuginfo" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334428", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335251", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-debugsource@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-debugsource" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334429", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335252", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-devel@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-devel" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334430", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335253", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-libs" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334431", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335254", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-libs-debuginfo@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-libs-debuginfo" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el10_2", "product": { "name": "vers:rpm/3.5.5-4.el10_2", "product_id": "CSAFPID-8334432", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@3.5.5-4.el10_2?arch=x86_64&epoch=1" } } }, { "category": "product_version_range", "name": "vers:rpm/3.5.5-4.el9_8", "product": { "name": "vers:rpm/3.5.5-4.el9_8", "product_id": "CSAFPID-8335255", "product_identification_helper": { "purl": "pkg:rpm/redhat/openssl-perl@3.5.5-4.el9_8?arch=x86_64&epoch=1" } } } ], "category": "product_name", "name": "openssl-perl" } ], "category": "product_family", "name": "Red Hat Enterprise Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/1.5", "product": { "name": "vers:rpm/1.5", "product_id": "CSAFPID-3038902", "product_identification_helper": { "cpe": "cpe:/a:redhat:insights_proxy:1.5::el9" } } } ], "category": "product_name", "name": "Red Hat Insights proxy 1.5" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1782890503", "product": { "name": "vers:oci/1782890503", "product_id": "CSAFPID-8525456", "product_identification_helper": { "purl": "pkg:oci/insights-proxy-container-rhel9@sha256%3Ad819e02ffed786e8544254bd3780dcd8a336ac8640bcfe46bdafaaa5f59e192c?arch=arm64&repository_url=registry.redhat.io/insights-proxy/insights-proxy-container-rhel9&tag=1782890503" } } } ], "category": "product_name", "name": "insights-proxy-container-rhel9" } ], "category": "product_family", "name": "Red Hat Insights proxy" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/4", "product": { "name": "vers:rpm/4", "product_id": "CSAFPID-1439328", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:4" } } } ], "category": "product_name", "name": "Red Hat OpenShift Container Platform 4" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/5", "product": { "name": "vers:rpm/5", "product_id": "CSAFPID-5247203", "product_identification_helper": { "cpe": "cpe:/a:redhat:rhui:5::el9" } } } ], "category": "product_name", "name": "Red Hat Update Infrastructure 5" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1781525677", "product": { "name": "vers:oci/1781525677", "product_id": "CSAFPID-8472887", "product_identification_helper": { "purl": "pkg:oci/cds-kubernetes-rhel9@sha256%3A2958104c085c46561c9453784a06a36ab12a27e21ba1e732b4b30a092bb58805?arch=amd64&repository_url=registry.redhat.io/rhui5/cds-kubernetes-rhel9&tag=1781525677" } } } ], "category": "product_name", "name": "cds-kubernetes-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1781525684", "product": { "name": "vers:oci/1781525684", "product_id": "CSAFPID-8472883", "product_identification_helper": { "purl": "pkg:oci/cds-rhel9@sha256%3A5c18f8336186fb1c9dbc1e710e91420ca3f5eca92b081cace3325585789f4825?arch=amd64&repository_url=registry.redhat.io/rhui5/cds-rhel9&tag=1781525684" } } } ], "category": "product_name", "name": "cds-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1781525671", "product": { "name": "vers:oci/1781525671", "product_id": "CSAFPID-8472884", "product_identification_helper": { "purl": "pkg:oci/haproxy-rhel9@sha256%3A66ccfb245bd6461e49aa0c84742710b557b9924baaef38e02904c6fd2f8db0c5?arch=amd64&repository_url=registry.redhat.io/rhui5/haproxy-rhel9&tag=1781525671" } } } ], "category": "product_name", "name": "haproxy-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1781525693", "product": { "name": "vers:oci/1781525693", "product_id": "CSAFPID-8472885", "product_identification_helper": { "purl": "pkg:oci/installer-rhel9@sha256%3A4b793b24511377dd18beae2f85792e8b2af0c615837155137a62f65e171ca0d7?arch=amd64&repository_url=registry.redhat.io/rhui5/installer-rhel9&tag=1781525693" } } } ], "category": "product_name", "name": "installer-rhel9" }, { "branches": [ { "category": "product_version_range", "name": "vers:oci/1781525739", "product": { "name": "vers:oci/1781525739", "product_id": "CSAFPID-8472886", "product_identification_helper": { "purl": "pkg:oci/rhua-rhel9@sha256%3Aa79dde325d7229002a36a0a8ad75ae8c25e96004a9e5f0b90c51fc335460dccf?arch=amd64&repository_url=registry.redhat.io/rhui5/rhua-rhel9&tag=1781525739" } } } ], "category": "product_name", "name": "rhua-rhel9" } ], "category": "product_family", "name": "Red Hat Update Infrastructure" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832804" } } ], "category": "product_name", "name": "compat-openssl10" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832805" } } ], "category": "product_name", "name": "edk2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832806" } } ], "category": "product_name", "name": "mingw-openssl" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832807" } } ], "category": "product_name", "name": "openssl" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832808" } } ], "category": "product_name", "name": "shim" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832809" } } ], "category": "product_name", "name": "shim-unsigned-x64" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 8" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832810" } } ], "category": "product_name", "name": "compat-openssl11" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832811" } } ], "category": "product_name", "name": "edk2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832812" } } ], "category": "product_name", "name": "openssl" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832815" } } ], "category": "product_name", "name": "shim" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832816" } } ], "category": "product_name", "name": "shim-unsigned-aarch64" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832817" } } ], "category": "product_name", "name": "shim-unsigned-x64" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 9" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4847758" } } ], "category": "product_name", "name": "edk2" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-3010676" } } ], "category": "product_name", "name": "openssl" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4847759" } } ], "category": "product_name", "name": "shim" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4847760" } } ], "category": "product_name", "name": "shim-unsigned-aarch64" }, { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-4847761" } } ], "category": "product_name", "name": "shim-unsigned-x64" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 10" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832801" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 6" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1832803" } } ], "category": "product_name", "name": "ovmf" } ], "category": "product_family", "name": "Red Hat Enterprise Linux 7" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:rpm/unknown", "product": { "name": "vers:rpm/unknown", "product_id": "CSAFPID-1439329" } } ], "category": "product_name", "name": "rhcos" } ], "category": "product_family", "name": "Red Hat OpenShift Container Platform 4" } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1295663", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "product_name", "name": "Debian Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/*", "product": { "name": "vers:deb/*", "product_id": "CSAFPID-2000251" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "bookworm" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:deb/*", "product": { "name": "vers:deb/*", "product_id": "CSAFPID-2000252" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "bullseye" } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317178", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "product_name", "name": "Fedora Linux" } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1341547", "product_identification_helper": { "cpe": "cpe:/o:freebsd:freebsd:-" } } } ], "category": "product_name", "name": "FreeBSD Project FreeBSD OS" } ], "category": "vendor", "name": "FreeBSD Project" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<16.2.1.30709", "product": { "name": "vers:unknown/<16.2.1.30709", "product_id": "CSAFPID-8914934" } } ], "category": "product_name", "name": "Innovator" } ], "category": "vendor", "name": "MID" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/=3.5.0|<3.5.7", "product": { "name": "vers:unknown/>=3.5.0|<3.5.7", "product_id": "CSAFPID-8464653", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=3.6.0|<3.6.3", "product": { "name": "vers:unknown/>=3.6.0|<3.6.3", "product_id": "CSAFPID-8464654", "product_identification_helper": { "cpe": "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.0", "product": { "name": "vers:unknown/openssl-3.5.0", "product_id": "CSAFPID-3773471" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.1", "product": { "name": "vers:unknown/openssl-3.5.1", "product_id": "CSAFPID-4626302" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.2", "product": { "name": "vers:unknown/openssl-3.5.2", "product_id": "CSAFPID-4626303" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.3", "product": { "name": "vers:unknown/openssl-3.5.3", "product_id": "CSAFPID-4950548" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.4", "product": { "name": "vers:unknown/openssl-3.5.4", "product_id": "CSAFPID-5490274" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.5", "product": { "name": "vers:unknown/openssl-3.5.5", "product_id": "CSAFPID-5850922" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.5.6", "product": { "name": "vers:unknown/openssl-3.5.6", "product_id": "CSAFPID-8564476" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.6.0", "product": { "name": "vers:unknown/openssl-3.6.0", "product_id": "CSAFPID-5490275" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.6.1", "product": { "name": "vers:unknown/openssl-3.6.1", "product_id": "CSAFPID-5850923" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-3.6.2", "product": { "name": "vers:unknown/openssl-3.6.2", "product_id": "CSAFPID-8564477" } }, { "category": "product_version_range", "name": "vers:unknown/openssl-4.0.0", "product": { "name": "vers:unknown/openssl-4.0.0", "product_id": "CSAFPID-8564474" } } ], "category": "product_name", "name": "openssl" } ], "category": "vendor", "name": "OpenSSL Project" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:oracle/>=23.4.0|<=23.26.2", "product": { "name": "vers:oracle/>=23.4.0|<=23.26.2", "product_id": "CSAFPID-7987382", "product_identification_helper": { "cpe": "cpe:2.3:a:oracle:database_-_database:23.4.0-23.26.2:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "Oracle Database Server" } ], "category": "product_family", "name": "Oracle Database Server" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317177", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "product_name", "name": "Oracle Linux" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<11.3 esu 36.36", "product": { "name": "vers:unknown/<11.3 esu 36.36", "product_id": "CSAFPID-8878802" } }, { "category": "product_version_range", "name": "vers:unknown/<11.4 sru 94", "product": { "name": "vers:unknown/<11.4 sru 94", "product_id": "CSAFPID-8878801" } } ], "category": "product_name", "name": "Solaris" } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330300", "product_identification_helper": { "cpe": "cpe:/o:resf:rocky_linux:-" } } } ], "category": "product_name", "name": "RESF Rocky Linux" } ], "category": "vendor", "name": "RESF" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317176", "product_identification_helper": { "cpe": "cpe:/o:suse:opensuse:-" } } } ], "category": "product_name", "name": "SUSE openSUSE" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1317174", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "product_name", "name": "SuSE Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product": { "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product_id": "CSAFPID-8528311" } } ], "category": "product_name", "name": "openssl-3" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server 16.0" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product": { "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product_id": "CSAFPID-8528312" } } ], "category": "product_name", "name": "openssl-3" } ], "category": "product_family", "name": "SUSE:Linux Enterprise Server for SAP applications 16.0" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product": { "name": "vers:unknown/>=0|<3.5.0-160000.8.1", "product_id": "CSAFPID-8518164" } } ], "category": "product_name", "name": "openssl-3" } ], "category": "product_family", "name": "SUSE:Linux Micro 6.2" } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<15.0.6", "product": { "name": "vers:unknown/<15.0.6", "product_id": "CSAFPID-8870622" } } ], "category": "product_name", "name": "Secure E-Mail Gateway" } ], "category": "vendor", "name": "SEPPmail" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1330299", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "product_name", "name": "Ubuntu Linux" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/2025.02-8ubuntu3", "product": { "name": "vers:unknown/2025.02-8ubuntu3", "product_id": "CSAFPID-7944913", "product_identification_helper": { "purl": "pkg:deb/ubuntu/edk2@2025.02-8ubuntu3?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/2025.11-3ubuntu6", "product": { "name": "vers:unknown/2025.11-3ubuntu6", "product_id": "CSAFPID-7944914", "product_identification_helper": { "purl": "pkg:deb/ubuntu/edk2@2025.11-3ubuntu6?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/2025.11-3ubuntu7", "product": { "name": "vers:unknown/2025.11-3ubuntu7", "product_id": "CSAFPID-7944915", "product_identification_helper": { "purl": "pkg:deb/ubuntu/edk2@2025.11-3ubuntu7?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-7944916" } } ], "category": "product_name", "name": "edk2" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/3.5.3-1ubuntu2", "product": { "name": "vers:unknown/3.5.3-1ubuntu2", "product_id": "CSAFPID-8263218", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.3-1ubuntu2?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.5-1ubuntu1", "product": { "name": "vers:unknown/3.5.5-1ubuntu1", "product_id": "CSAFPID-8263219", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.5-1ubuntu1?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.5-1ubuntu3", "product": { "name": "vers:unknown/3.5.5-1ubuntu3", "product_id": "CSAFPID-8263220", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.5-1ubuntu3?arch=source&distro=resolute" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<3.5.5-1ubuntu3.2", "product": { "name": "vers:unknown/>=0|<3.5.5-1ubuntu3.2", "product_id": "CSAFPID-8263319" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Ubuntu:26.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/12.22.5~dfsg-5ubuntu1", "product": { "name": "vers:unknown/12.22.5~dfsg-5ubuntu1", "product_id": "CSAFPID-5958826", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.5~dfsg-5ubuntu1?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.7~dfsg-2ubuntu1", "product": { "name": "vers:unknown/12.22.7~dfsg-2ubuntu1", "product_id": "CSAFPID-5958827", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.7~dfsg-2ubuntu1?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.7~dfsg-2ubuntu3", "product": { "name": "vers:unknown/12.22.7~dfsg-2ubuntu3", "product_id": "CSAFPID-5958828", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.7~dfsg-2ubuntu3?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu2", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu2", "product_id": "CSAFPID-5958829", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu2?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3", "product_id": "CSAFPID-5958830", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.1", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.1", "product_id": "CSAFPID-5958831", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.1?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.2", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.2", "product_id": "CSAFPID-5958832", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.2?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.3", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.3", "product_id": "CSAFPID-5958833", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.3?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.4", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.4", "product_id": "CSAFPID-5958834", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.4?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.5", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.5", "product_id": "CSAFPID-5958835", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.5?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6", "product_id": "CSAFPID-5958836", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.6?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6+esm2", "product": { "name": "vers:unknown/12.22.9~dfsg-1ubuntu3.6+esm2", "product_id": "CSAFPID-5958837", "product_identification_helper": { "purl": "pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3.6%2Besm2?arch=source&distro=esm-apps/jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0", "product": { "name": "vers:unknown/>=0", "product_id": "CSAFPID-5958838" } } ], "category": "product_name", "name": "nodejs" } ], "category": "product_family", "name": "Ubuntu:Pro:22.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.1.1l-1ubuntu1", "product": { "name": "vers:unknown/1.1.1l-1ubuntu1", "product_id": "CSAFPID-5836725", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@1.1.1l-1ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.0-1ubuntu1", "product": { "name": "vers:unknown/3.0.0-1ubuntu1", "product_id": "CSAFPID-5836726", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.0-1ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.1-0ubuntu1", "product": { "name": "vers:unknown/3.0.1-0ubuntu1", "product_id": "CSAFPID-5836727", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.1-0ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1", "product": { "name": "vers:unknown/3.0.2-0ubuntu1", "product_id": "CSAFPID-5836728", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.1", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.1", "product_id": "CSAFPID-5836729", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.1?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.10", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.10", "product_id": "CSAFPID-5836737", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.10?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.12", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.12", "product_id": "CSAFPID-5836738", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.12?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.13", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.13", "product_id": "CSAFPID-5836739", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.13?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.14", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.14", "product_id": "CSAFPID-5836740", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.14?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.15", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.15", "product_id": "CSAFPID-5836741", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.15?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.16", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.16", "product_id": "CSAFPID-6062831", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.16?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.17", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.17", "product_id": "CSAFPID-6062832", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.17?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.18", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.18", "product_id": "CSAFPID-6062833", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.18?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.19", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.19", "product_id": "CSAFPID-6062834", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.19?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.2", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.2", "product_id": "CSAFPID-5836730", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.2?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.20", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.20", "product_id": "CSAFPID-6062835", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.20?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.21", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.21", "product_id": "CSAFPID-6062836", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.21?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.23", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.23", "product_id": "CSAFPID-8263209", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.23?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.4", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.4", "product_id": "CSAFPID-5836731", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.4?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.5", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.5", "product_id": "CSAFPID-5836732", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.5?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.6", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.6", "product_id": "CSAFPID-5836733", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.6?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.7", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.7", "product_id": "CSAFPID-5836734", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.7?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.8", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.8", "product_id": "CSAFPID-5836735", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.8?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.2-0ubuntu1.9", "product": { "name": "vers:unknown/3.0.2-0ubuntu1.9", "product_id": "CSAFPID-5836736", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.2-0ubuntu1.9?arch=source&distro=jammy" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<3.0.2-0ubuntu1.25", "product": { "name": "vers:unknown/>=0|<3.0.2-0ubuntu1.25", "product_id": "CSAFPID-8263316" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Ubuntu:22.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/3.0.10-1ubuntu2", "product": { "name": "vers:unknown/3.0.10-1ubuntu2", "product_id": "CSAFPID-6062874", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.10-1ubuntu2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.10-1ubuntu2.1", "product": { "name": "vers:unknown/3.0.10-1ubuntu2.1", "product_id": "CSAFPID-6062875", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.10-1ubuntu2.1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.10-1ubuntu3", "product": { "name": "vers:unknown/3.0.10-1ubuntu3", "product_id": "CSAFPID-6062876", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.10-1ubuntu3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.10-1ubuntu4", "product": { "name": "vers:unknown/3.0.10-1ubuntu4", "product_id": "CSAFPID-6062877", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.10-1ubuntu4?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu2", "product": { "name": "vers:unknown/3.0.13-0ubuntu2", "product_id": "CSAFPID-6062878", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3", "product": { "name": "vers:unknown/3.0.13-0ubuntu3", "product_id": "CSAFPID-6062879", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.1", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.1", "product_id": "CSAFPID-6062880", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.1?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.2", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.2", "product_id": "CSAFPID-6062881", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.2?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.3", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.3", "product_id": "CSAFPID-6062882", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.3?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.4", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.4", "product_id": "CSAFPID-6062883", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.4?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.5", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.5", "product_id": "CSAFPID-6062884", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.5?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.6", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.6", "product_id": "CSAFPID-6062885", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.6?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.7", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.7", "product_id": "CSAFPID-6062886", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.7?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/3.0.13-0ubuntu3.9", "product": { "name": "vers:unknown/3.0.13-0ubuntu3.9", "product_id": "CSAFPID-8263212", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.0.13-0ubuntu3.9?arch=source&distro=noble" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<3.0.13-0ubuntu3.11", "product": { "name": "vers:unknown/>=0|<3.0.13-0ubuntu3.11", "product_id": "CSAFPID-8263317" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Ubuntu:24.04:LTS" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/3.4.1-1ubuntu3", "product": { "name": "vers:unknown/3.4.1-1ubuntu3", "product_id": "CSAFPID-6062898", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.4.1-1ubuntu3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.0-2ubuntu1", "product": { "name": "vers:unknown/3.5.0-2ubuntu1", "product_id": "CSAFPID-6062899", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.0-2ubuntu1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.2-1ubuntu1", "product": { "name": "vers:unknown/3.5.2-1ubuntu1", "product_id": "CSAFPID-6062900", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.2-1ubuntu1?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.3-1ubuntu2", "product": { "name": "vers:unknown/3.5.3-1ubuntu2", "product_id": "CSAFPID-6062901", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.3-1ubuntu2?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.3-1ubuntu3", "product": { "name": "vers:unknown/3.5.3-1ubuntu3", "product_id": "CSAFPID-6062902", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.3-1ubuntu3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/3.5.3-1ubuntu3.3", "product": { "name": "vers:unknown/3.5.3-1ubuntu3.3", "product_id": "CSAFPID-8263215", "product_identification_helper": { "purl": "pkg:deb/ubuntu/openssl@3.5.3-1ubuntu3.3?arch=source&distro=questing" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<3.5.3-1ubuntu3.4", "product": { "name": "vers:unknown/>=0|<3.5.3-1ubuntu3.4", "product_id": "CSAFPID-8263318" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Ubuntu:25.10" } ], "category": "vendor", "name": "Ubuntu" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-6332536", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_cloud-hypervisor_51.1.56-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 cloud-hypervisor 51.1.56-1 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-8948588", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_kata-containers_3.32.0.kata0-1:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 kata-containers 3.32.0.kata0-1 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-8467206", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_nodejs_24.14.1-3:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 nodejs 24.14.1-3 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-8467208", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_rust_1.75.0-29:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 rust 1.75.0-29 on Azure Linux 3.0" }, { "branches": [ { "category": "product_version_range", "name": "vers:microsoft/*", "product": { "name": "vers:microsoft/*", "product_id": "CSAFPID-8467209", "product_identification_helper": { "cpe": "cpe:2.3:a:microsoft:azl3_rust_1.90.0-8:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "azl3 rust 1.90.0-8 on Azure Linux 3.0" } ], "category": "product_family", "name": "Open Source Software" } ], "category": "vendor", "name": "Microsoft" }, { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product": { "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product_id": "CSAFPID-8548555" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Alpine:v3.22" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product": { "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product_id": "CSAFPID-8548556" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Alpine:v3.23" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product": { "name": "vers:unknown/>=3.5.0|<3.5.7-r0", "product_id": "CSAFPID-8548557" } } ], "category": "product_name", "name": "openssl" } ], "category": "product_family", "name": "Alpine:v3.24" } ], "category": "vendor", "name": "Alpine" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-42764", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "CSAFPID-8472887", "CSAFPID-8849290" ] } ], "notes": [ { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42764.json" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-42764" }, { "category": "description", "text": "Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. NULL pointer dereference typically causes abnormal termination of the affected QUIC server process and a Denial of Service.", "title": "openssl - https://openssl-library.org/news/secadv/20260609.txt" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server process and a Denial of Service. If the address validation is disabled in the OpenSSL QUIC server implementation, an attacker can crash the server by sending an initial packet with an invalid or expired token. By default, the client address validation is enabled in the OpenSSL QUIC server implementation, which makes the default configuration not vulnerable to this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with the SSL_new_listener() call, the address validation is disabled making the vulnerable code reachable. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "debian - https://security-tracker.debian.org/tracker/CVE-2026-42764" }, { "category": "description", "text": "Frank Buss discovered that OpenSSL had a heap buffer over-read in ASN.1\ncontent parsing. An attacker could possibly use this issue to cause OpenSSL\nto crash, resulting in a denial of service, or obtain sensitive\ninformation. (CVE-2026-34180)\n\nPavol Zacik and Alex Gaynor discovered that OpenSSL incorrectly accepted\nPKCS#12 files with short HMAC keys when using PBMAC1. An attacker could\npossibly use this issue to bypass integrity checks. This issue only\naffected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-34181)\n\nAsim Viladi Oglu Manizada and Alex Gaynor discovered that OpenSSL could\naccept forged CMS AuthEnvelopedData messages. An attacker could possibly\nuse this issue to bypass message authentication checks. (CVE-2026-34182)\n\nAbhinav Agarwal discovered that OpenSSL had unbounded memory growth in the\nQUIC PATH_CHALLENGE handler. A remote attacker could possibly use this\nissue to cause OpenSSL to use excessive resources, leading to a denial of\nservice. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.\n(CVE-2026-34183)\n\nSunwoo Lee, Hyuk Lim, and Seunghyun Yoon discovered that OpenSSL had a NULL\npointer dereference in QUIC server initial packet handling. A remote\nattacker could possibly use this issue to cause OpenSSL to crash, resulting\nin a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu\n26.04 LTS. (CVE-2026-42764)\n\nMayank Jangid, Kushal Khemka, Hari Priandana, Bhabani Sankar Das, and Qifan\nZhang discovered that OpenSSL had a possible NULL dereference in password-\nbased CMS decryption. An attacker could possibly use this issue to cause\nOpenSSL to crash, resulting in a denial of service. (CVE-2026-42766)\n\nZhanpeng Liu, Guannan Wang, and Guancheng Li discovered that OpenSSL had a\nNULL pointer dereference in CRMF EncryptedValue decryption. An attacker\ncould possibly use this issue to cause OpenSSL to crash, resulting in a\ndenial of service. (CVE-2026-42767)\n\nAlex Gaynor discovered that OpenSSL had a Bleichenbacher oracle in\nCMS_decrypt() and PKCS7_decrypt() with multiple RecipientInfo values. An\nattacker could possibly use this issue to obtain sensitive information.\nThis issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.\n(CVE-2026-42768)\n\nAlex Gaynor discovered that OpenSSL had a trust-anchor substitution issue\nin CMP rootCaKeyUpdate processing. An attacker could possibly use this\nissue to bypass certificate trust validation. This issue only affected\nUbuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-42769)\n\nAlex Gaynor discovered that OpenSSL used attacker-supplied parameters when\nvalidating FFC-DH peers. An attacker could possibly use this issue to\nweaken key validation and compromise security guarantees. (CVE-2026-42770)\n\nAlex Gaynor discovered that OpenSSL could ignore the IV in AES-OCB mode on\nthe EVP_Cipher() path. An attacker could possibly use this issue to bypass\ncryptographic protections and obtain sensitive information.\n(CVE-2026-45445)\n\nAlex Gaynor discovered that OpenSSL had incorrect tag processing for empty\nmessages in AES-GCM-SIV and AES-SIV modes. An attacker could possibly use\nthis issue to bypass cryptographic integrity checks. (CVE-2026-45446)\n\nThai Duong discovered that OpenSSL had a heap use-after-free in\nPKCS7_verify(). An attacker could possibly use this issue to cause OpenSSL\nto crash, resulting in a denial of service, or execute arbitrary code.\n(CVE-2026-45447)\n\nZehua Qiao and Jinwen He discovered that OpenSSL had a possible heap buffer\noverflow in ASN.1 multibyte string conversion. An attacker could possibly\nuse this issue to cause OpenSSL to crash, resulting in a denial of service,\nor execute arbitrary code. (CVE-2026-7383)\n\nBhabani Sankar Das discovered that OpenSSL had an out-of-bounds read in CMS\npassword-based decryption. An attacker could possibly use this issue to\ncause OpenSSL to crash, resulting in a denial of service. (CVE-2026-9076)", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUSN-8414-1.json?alt=media" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-42764.json?alt=media" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\nA flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).\nThis is a Moderate severity issue. A NULL pointer dereference can occur in the OpenSSL QUIC server when processing initial packets with invalid tokens, leading to a denial of service. This vulnerability is only exploitable if the client address validation is explicitly disabled using the `SSL_LISTENER_FLAG_NO_VALIDATE` flag, which is not the default configuration for OpenSSL QUIC servers.", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42764.json" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:25237.json" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:25239.json" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation disabled. Impact summary: NULL pointer dereference typically causes abnormal termination of the affected QUIC server process and a Denial of Service. If the address validation is disabled in the OpenSSL QUIC server implementation, an attacker can crash the server by sending an initial packet with an invalid or expired token. By default, the client address validation is enabled in the OpenSSL QUIC server implementation, which makes the default configuration not vulnerable to this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with the SSL_new_listener() call, the address validation is disabled making the vulnerable code reachable. The FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-42764.json?alt=media" }, { "category": "description", "text": "NULL Pointer Dereference in QUIC Server Initial Packet Handling", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Jun" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:26319.json" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:29197.json" }, { "category": "description", "text": "This update for openssl-3 fixes the following issues\n\n- CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).\n- CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345).\n- CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).\n- CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351).\n- CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352).\n- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).\n- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).\n- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22251-1.json?alt=media" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:34102.json" }, { "category": "description", "text": "This update for openssl-3 fixes the following issues\n\n- CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group (bsc#1259652).\n- CVE-2026-7383: Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion (bsc#1266340).\n- CVE-2026-9076: Out-of-Bounds Read in CMS Password-Based Decryption (bsc#1266341).\n- CVE-2026-34180: Heap Buffer Over-read in ASN.1 Content Parsing (bsc#1266342).\n- CVE-2026-34182: CMS AuthEnvelopedData Processing May Accept Forged Messages (bsc#1266344).\n- CVE-2026-34183: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler (bsc#1266345).\n- CVE-2026-42764: NULL pointer dereference in QUIC server initial packet handling (bsc#1266347).\n- CVE-2026-42766: Possible NULL Dereference in Password-Based CMS Decryption (bsc#1266349).\n- CVE-2026-42767: NULL Pointer Dereference in CRMF EncryptedValue Decryption (bsc#1266350).\n- CVE-2026-42768: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt() (bsc#1266351).\n- CVE-2026-42769: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate (bsc#1266352).\n- CVE-2026-42770: FFC-DH Peer Validation Uses Attacker-Supplied q (bsc#1266353).\n- CVE-2026-45445: AES-OCB IV Ignored on EVP_Cipher() Path (bsc#1266355).\n- CVE-2026-45446: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes (bsc#1266356).\n- CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() (bsc#1266357).\n", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22315-1.json?alt=media" }, { "category": "description", "text": "Issue summary: Receiving a QUIC initial packet with an invalid token may\ntrigger a NULL pointer dereference in the OpenSSL QUIC server with\naddress validation disabled.\n\nImpact summary: NULL pointer dereference typically causes abnormal termination\nof the affected QUIC server process and a Denial of Service.\n\nIf the address validation is disabled in the OpenSSL QUIC server\nimplementation, an attacker can crash the server by sending an initial\npacket with an invalid or expired token.\n\nBy default, the client address validation is enabled in the OpenSSL QUIC server\nimplementation, which makes the default configuration not vulnerable\nto this issue. However if the SSL_LISTENER_FLAG_NO_VALIDATE is used with\nthe SSL_new_listener() call, the address validation is disabled making the\nvulnerable code reachable.\n\nThe FIPS modules in 4.0, 3.6, 3.5, 3.4, and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-42764.json?alt=media" }, { "category": "description", "text": "A flaw was found in the OpenSSL QUIC (Quick UDP Internet Connections) server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server process to terminate abnormally and resulting in a Denial of Service (DoS).", "title": "redhat - https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:39981.json" }, { "category": "description", "text": "Vulnerability in the Database (OpenSSL) component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Database (OpenSSL). Successful attacks of this vulnerability can result in takeover of Database (OpenSSL).", "title": "oracle - https://www.oracle.com/a/tech/docs/security-alerts/cpujul2026csaf.json" }, { "category": "description", "text": "NULL Pointer Dereference in QUIC Server Initial Packet Handling", "title": "microsoft - https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Aug" }, { "category": "description", "text": "Multiple NetApp products incorporate OpenSSL. OpenSSL versions 4.0, 3.6, and 3.5 are susceptible to a vulnerability which when successfully exploited could lead to Denial of Service (DoS).", "title": "netapp - https://security.netapp.com/advisory/ntap-20260617-0004" }, { "category": "other", "text": "0.01165", "title": "EPSS" }, { "category": "other", "text": "6.0", "title": "NCSC Score" }, { "category": "other", "text": "IMPACT as product threat category, Is related to (a version of) an uncommon product, The value of the most recent EPSS score, VENDOR FIX as product remediation category, There is product data available from source Certbundde, There is product data available from source Oracle, There is product_remediation data available from source Oracle", "title": "NCSC Score top increasing factors" }, { "category": "other", "text": "The CVSS vector string contains AV:N (Attack Vector: Network), Is related to (a version of) product Suse Opensuse, Is related to a product by vendor Open Source", "title": "NCSC Score top decreasing factors" }, { "category": "details", "text": "Severity: 2\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 2\n", "title": "Vendor assessment" }, { "category": "details", "text": "Severity: 3\n", "title": "Vendor assessment" } ], "product_status": { "fixed": [ "CSAFPID-7372357", "CSAFPID-8334426", "CSAFPID-8334427", "CSAFPID-8334428", "CSAFPID-8334429", "CSAFPID-8334430", "CSAFPID-8334431", "CSAFPID-8334432", "CSAFPID-1432758", "CSAFPID-8335249", "CSAFPID-8335250", "CSAFPID-8335251", "CSAFPID-8335252", "CSAFPID-8335253", "CSAFPID-8335254", "CSAFPID-8335255", "CSAFPID-8472883", "CSAFPID-8472884", "CSAFPID-8472885", "CSAFPID-8472886", "CSAFPID-8495366", "CSAFPID-8495367", "CSAFPID-8525456", "CSAFPID-8849289" ], "known_affected": [ "CSAFPID-8256970", "CSAFPID-8256971", "CSAFPID-8256972", "CSAFPID-8258839", "CSAFPID-5836725", "CSAFPID-5836726", "CSAFPID-5836727", "CSAFPID-5836728", "CSAFPID-5836729", "CSAFPID-5836730", "CSAFPID-5836731", "CSAFPID-5836732", "CSAFPID-5836733", "CSAFPID-5836734", "CSAFPID-5836735", "CSAFPID-5836736", "CSAFPID-5836737", "CSAFPID-5836738", "CSAFPID-5836739", "CSAFPID-5836740", "CSAFPID-5836741", "CSAFPID-6062831", "CSAFPID-6062832", "CSAFPID-6062833", "CSAFPID-6062834", "CSAFPID-6062835", "CSAFPID-6062836", "CSAFPID-6062874", "CSAFPID-6062875", "CSAFPID-6062876", "CSAFPID-6062877", "CSAFPID-6062878", "CSAFPID-6062879", "CSAFPID-6062880", "CSAFPID-6062881", "CSAFPID-6062882", "CSAFPID-6062883", "CSAFPID-6062884", "CSAFPID-6062885", "CSAFPID-6062886", "CSAFPID-6062898", "CSAFPID-6062899", "CSAFPID-6062900", "CSAFPID-6062901", "CSAFPID-6062902", "CSAFPID-8263209", "CSAFPID-8263212", "CSAFPID-8263215", "CSAFPID-8263218", "CSAFPID-8263219", "CSAFPID-8263220", "CSAFPID-8263316", "CSAFPID-8263317", "CSAFPID-8263318", "CSAFPID-8263319", "CSAFPID-5958826", "CSAFPID-5958827", "CSAFPID-5958828", "CSAFPID-5958829", "CSAFPID-5958830", "CSAFPID-5958831", "CSAFPID-5958832", "CSAFPID-5958833", "CSAFPID-5958834", "CSAFPID-5958835", "CSAFPID-5958836", "CSAFPID-5958837", "CSAFPID-5958838", "CSAFPID-7944913", "CSAFPID-7944914", "CSAFPID-7944915", "CSAFPID-7944916", "CSAFPID-1295663", "CSAFPID-1330299", "CSAFPID-1341547", "CSAFPID-8263566", "CSAFPID-8263567", "CSAFPID-8263568", "CSAFPID-8263569", "CSAFPID-8263570", "CSAFPID-8263571", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439321", "CSAFPID-1439328", "CSAFPID-1439329", "CSAFPID-1832801", "CSAFPID-1832803", "CSAFPID-1832804", "CSAFPID-1832805", "CSAFPID-1832806", "CSAFPID-1832807", "CSAFPID-1832808", "CSAFPID-1832809", "CSAFPID-1832810", "CSAFPID-1832811", "CSAFPID-1832812", "CSAFPID-1832815", "CSAFPID-1832816", "CSAFPID-1832817", "CSAFPID-2858634", "CSAFPID-3010676", "CSAFPID-4847758", "CSAFPID-4847759", "CSAFPID-4847760", "CSAFPID-4847761", "CSAFPID-1317178", "CSAFPID-1317175", "CSAFPID-1330300", "CSAFPID-8464653", "CSAFPID-8464654", "CSAFPID-8464655", "CSAFPID-1317174", "CSAFPID-1317176", "CSAFPID-6332536", "CSAFPID-8467206", "CSAFPID-8467208", "CSAFPID-8467209", "CSAFPID-1317177", "CSAFPID-5002922", "CSAFPID-5526552", "CSAFPID-8474099", "CSAFPID-1341595", "CSAFPID-1341596", "CSAFPID-1330296", "CSAFPID-8514263", "CSAFPID-8518164", "CSAFPID-8528311", "CSAFPID-8528312", "CSAFPID-8548555", "CSAFPID-8548556", "CSAFPID-8548557", "CSAFPID-149529", "CSAFPID-3773471", "CSAFPID-4626302", "CSAFPID-4626303", "CSAFPID-4950548", "CSAFPID-5490268", "CSAFPID-5490269", "CSAFPID-5490270", "CSAFPID-5490271", "CSAFPID-5490274", "CSAFPID-5490275", "CSAFPID-5850922", "CSAFPID-5850923", "CSAFPID-8564473", "CSAFPID-8564474", "CSAFPID-8564476", "CSAFPID-8564477", "CSAFPID-39373", "CSAFPID-39374", "CSAFPID-39376", "CSAFPID-2733624", "CSAFPID-8870622", "CSAFPID-8878801", "CSAFPID-8878802", "CSAFPID-448", "CSAFPID-9499", "CSAFPID-123182", "CSAFPID-8879391", "CSAFPID-7987382", "CSAFPID-8914934", "CSAFPID-1337765", "CSAFPID-8948588" ], "known_not_affected": [ "CSAFPID-2000251", "CSAFPID-2000252", "CSAFPID-8472887", "CSAFPID-8849290" ] }, "references": [ { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-42764" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUSN-8414-1.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Ubuntu%2FUBUNTU-CVE-2026-42764.json?alt=media" }, { "category": "external", "summary": "Source - openssl", "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/42xxx/CVE-2026-42764.json" }, { "category": "external", "summary": "Source - debian", "url": "https://security-tracker.debian.org/tracker/CVE-2026-42764" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Alpine%2FALPINE-CVE-2026-42764.json?alt=media" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1852.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-42764.json" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/openssl-multiple-vulnerabilities_20260611" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:25237.json" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:25239.json" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Jun" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:26319.json" }, { "category": "external", "summary": "Source - netapp", "url": "https://security.netapp.com/advisory/ntap-20260617-0004" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:29197.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=10000" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22251-1.json?alt=media" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:34102.json" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/SUSE%2FSUSE-SU-2026:22315-1.json?alt=media" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/GIT%2FCVE-2026-42764.json?alt=media" }, { "category": "external", "summary": "Source - redhat", "url": "https://access.redhat.com/hydra/rest/securitydata/csaf/RHSA-2026:39981.json" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2455.json" }, { "category": "external", "summary": "Source - oracle", "url": "https://www.oracle.com/a/tech/docs/security-alerts/cpujul2026csaf.json" }, { "category": "external", "summary": "Source - microsoft", "url": "https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2026-Aug" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=20000" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0307" }, { "category": "external", "summary": "Reference - certbundde; cveprojectv5; netapp; nvd; osv", "url": "https://openssl-library.org/news/secadv/20260609.txt" }, { "category": "external", "summary": "Reference - osv", "url": "https://security.alpinelinux.org/vuln/CVE-2026-42764" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/openssl/openssl/commit/bf29a458c1a231eca87e384c62b9c2553fa57a91" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/openssl/openssl/commit/a45a0aba8095682c88ff4fc4a784892b8c6f0677" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd; osv", "url": "https://github.com/openssl/openssl/commit/5e3ed291b8af0b03d5d3b9e56a1da69a187e9729" }, { "category": "external", "summary": "Reference - certbundde; osv", "url": "https://ubuntu.com/security/notices/USN-8414-1" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-7383" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-9076" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34180" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34181" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34182" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-34183" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42764" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42766" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42767" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42768" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42769" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-42770" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-45445" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-45446" }, { "category": "external", "summary": "Reference - osv", "url": "https://ubuntu.com/security/CVE-2026-45447" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42764" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1852.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1852" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://openssl-library.org/news/vulnerabilities/index.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.freebsd.org/security/advisories/FreeBSD-SA-26:35.openssl.asc" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://ubuntu.com/security/notices/USN-8414-2" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security-tracker.debian.org/tracker/DSA-6335-1" }, { "category": "external", "summary": "Reference - osv; redhat", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42764" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-228373a496" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42764" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481887" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481879" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481880" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481881" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481882" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481884" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481885" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481890" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481891" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481892" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481893" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481894" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481896" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481897" }, { "category": "external", "summary": "Reference - redhat", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25237.json" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:25239" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25239.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:25237" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.debian.org/debian-lts-announce/2026/06/msg00019.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:25239" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026755.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026756.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/YTQ27HDP33LD6AS24REY2JEVD6LKVTQQ/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026760.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026761.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026759.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026772.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-26275.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026774.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026773.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026768.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026767.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026766.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026765.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:26275" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:26275" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:26319" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/products/red-hat-update-infrastructure" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-28390" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33845" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-33846" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34180" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34181" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34182" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-34183" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-35177" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-3832" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-3833" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-4046" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42009" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42010" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42011" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42012" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42013" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42014" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42015" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42766" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42767" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42768" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42769" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-42770" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-4437" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-4438" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45186" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45445" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45446" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45447" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5260" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5419" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-7383" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-9076" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification/" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/red_hat_update_infrastructure/5" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26319.json" }, { "category": "external", "summary": "Reference - netapp", "url": "https://openssl-library.org/news/vulnerabilities/index.html#CVE-2026-42764" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026812.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://security.netapp.com/advisory/NTAP-20260617-0018" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026811.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-50323.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://alas.aws.amazon.com/AL2/ALAS2OPENSSL-SNAPSAFE-2026-011.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3365.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:28010" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3364.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026956.html" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:29197" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2024-12086" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-14087" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-14512" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-29518" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-40355" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-40356" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-41035" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-43618" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44486" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44487" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44488" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44492" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44494" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44495" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-44496" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-45736" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-48779" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-4878" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-6322" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-9277" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/subscription_central/1-latest/#Discovery" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_29197.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026982.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026976.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://linux.oracle.com/errata/ELSA-2026-25239.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/027012.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/027022.html" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622251-1/" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1259652" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266340" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266341" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266342" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266344" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266345" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266347" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266349" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266350" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266351" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266352" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266353" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266355" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266356" }, { "category": "external", "summary": "Reference - osv", "url": "https://bugzilla.suse.com/1266357" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-2673" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34180" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34182" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-34183" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42764" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42766" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42767" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42768" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42769" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-42770" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-45445" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-45446" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-45447" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-7383" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/security/cve/CVE-2026-9076" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/errata/RHSA-2026:34102" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2024-34459" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-13151" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2025-5278" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-31790" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-41411" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-5450" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34102.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/027062.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-22312.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027151.html" }, { "category": "external", "summary": "Reference - osv", "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622315-1/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027170.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027259.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:35869" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:36217" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-36215.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7279343" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-50379.html" }, { "category": "external", "summary": "Reference - osv", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42764.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:39012" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:36215" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:39009" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7280075" }, { "category": "external", "summary": "Reference - certbundde; redhat", "url": "https://access.redhat.com/errata/RHSA-2026:39981" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027489.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027490.html" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/cve/CVE-2026-0915" }, { "category": "external", "summary": "Reference - redhat", "url": "https://access.redhat.com/security/updates/classification" }, { "category": "external", "summary": "Reference - redhat", "url": "https://docs.redhat.com/en/documentation/cost_management_service/1-latest/html/getting_started_with_cost_management/steps-to-cost-management" }, { "category": "external", "summary": "Reference - redhat", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_39981.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027608.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2455.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2455" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.oracle.com/security-alerts/bulletinjul2026.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "http://news.meinberg.de/680/" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7280621" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:44438" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-a024e7aa84" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-44438.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-22314.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-46395.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://errata.build.resf.org/RLSA-2026:44438" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/security-alerts/cpujul2026.html" }, { "category": "external", "summary": "Reference - oracle", "url": "https://www.oracle.com/docs/tech/security-alerts/cpujul2026csaf.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://linux.oracle.com/errata/ELSA-2026-25237.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:47735" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://info.mid.de/neuer-hotfix-f%C3%BCr-deinen-innovator-16.2-1" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-August/028105.html" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.ibm.com/support/pages/node/7282618" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://access.redhat.com/errata/RHSA-2026:52857" } ], "remediations": [ { "category": "mitigation", "details": "To mitigate this issue, ensure that the OpenSSL QUIC server has client address validation enabled. This is the default configuration. If the `SSL_LISTENER_FLAG_NO_VALIDATE` flag is being used with the `SSL_new_listener()` call, it should be removed to prevent the vulnerability from being exploitable.", "product_ids": [ "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439321", "CSAFPID-1439328", "CSAFPID-1439329", "CSAFPID-1832801", "CSAFPID-1832803", "CSAFPID-1832804", "CSAFPID-1832805", "CSAFPID-1832806", "CSAFPID-1832807", "CSAFPID-1832808", "CSAFPID-1832809", "CSAFPID-1832810", "CSAFPID-1832811", "CSAFPID-1832812", "CSAFPID-1832815", "CSAFPID-1832816", "CSAFPID-1832817", "CSAFPID-2858634", "CSAFPID-3010676", "CSAFPID-4847758", "CSAFPID-4847759", "CSAFPID-4847760", "CSAFPID-4847761" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-7372357", "CSAFPID-7372593", "CSAFPID-8334426", "CSAFPID-8334427", "CSAFPID-8334428", "CSAFPID-8334429", "CSAFPID-8334430", "CSAFPID-8334431", "CSAFPID-8334432" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:25237" }, { "category": "workaround", "details": "To mitigate this issue, ensure that the OpenSSL QUIC server has client address validation enabled. This is the default configuration. If the `SSL_LISTENER_FLAG_NO_VALIDATE` flag is being used with the `SSL_new_listener()` call, it should be removed to prevent the vulnerability from being exploitable.", "product_ids": [ "CSAFPID-7372357", "CSAFPID-7372593", "CSAFPID-8334426", "CSAFPID-8334427", "CSAFPID-8334428", "CSAFPID-8334429", "CSAFPID-8334430", "CSAFPID-8334431", "CSAFPID-8334432", "CSAFPID-1432758", "CSAFPID-1432840", "CSAFPID-8335249", "CSAFPID-8335250", "CSAFPID-8335251", "CSAFPID-8335252", "CSAFPID-8335253", "CSAFPID-8335254", "CSAFPID-8335255", "CSAFPID-5247203", "CSAFPID-8472883", "CSAFPID-8472884", "CSAFPID-8472885", "CSAFPID-8472886", "CSAFPID-8472887", "CSAFPID-2993424", "CSAFPID-8495366", "CSAFPID-8495367", "CSAFPID-3038902", "CSAFPID-8525456", "CSAFPID-5700339", "CSAFPID-8849289", "CSAFPID-8849290" ] }, { "category": "vendor_fix", "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258", "product_ids": [ "CSAFPID-1432758", "CSAFPID-1432840", "CSAFPID-8335249", "CSAFPID-8335250", "CSAFPID-8335251", "CSAFPID-8335252", "CSAFPID-8335253", "CSAFPID-8335254", "CSAFPID-8335255" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:25239" }, { "category": "vendor_fix", "details": "The container images provided by this release, apart from the installer, should be deployed using rhui-installer utility.\nSee the official documentation for more details.", "product_ids": [ "CSAFPID-5247203", "CSAFPID-8472883", "CSAFPID-8472884", "CSAFPID-8472885", "CSAFPID-8472886" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:26319" }, { "category": "vendor_fix", "details": "The containers required to run Discovery can be installed through discovery-installer\nRPM. See the official documentation for more details.", "product_ids": [ "CSAFPID-2993424", "CSAFPID-8495366", "CSAFPID-8495367" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:29197" }, { "category": "vendor_fix", "details": "The Insights proxy container image provided here is downloaded by the Red Hat\nInsights proxy product RPM.\n\nBefore applying this update, make sure all previously released errata relevant to\nyour system have been applied.", "product_ids": [ "CSAFPID-3038902", "CSAFPID-8525456" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34102" }, { "category": "vendor_fix", "details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://docs.openshift.com/container-platform/latest/operators/admin/olm-upgrading-operators.html", "product_ids": [ "CSAFPID-5700339", "CSAFPID-8849289" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:39981" }, { "category": "vendor_fix", "details": "OpenSSL 4.0 users should upgrade to OpenSSL 4.0.1. OpenSSL 3.6 users should upgrade to OpenSSL 3.6.3. OpenSSL 3.5 users should upgrade to OpenSSL 3.5.7.", "product_ids": [ "CSAFPID-8258839" ] }, { "category": "vendor_fix", "details": "Oracle customers with valid support contracts", "product_ids": [ "CSAFPID-7987382" ], "url": "https://support.oracle.com/support/?documentId=CPU199" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-123182", "CSAFPID-1295663", "CSAFPID-1317174", "CSAFPID-1317175", "CSAFPID-1317176", "CSAFPID-1317177", "CSAFPID-1317178", "CSAFPID-1330296", "CSAFPID-1330299", "CSAFPID-1330300", "CSAFPID-1337765", "CSAFPID-1341547", "CSAFPID-1341595", "CSAFPID-1341596", "CSAFPID-1439315", "CSAFPID-1439317", "CSAFPID-1439319", "CSAFPID-1439321", "CSAFPID-1439328", "CSAFPID-1439329", "CSAFPID-149529", "CSAFPID-1832801", "CSAFPID-1832803", "CSAFPID-1832804", "CSAFPID-1832805", "CSAFPID-1832806", "CSAFPID-1832807", "CSAFPID-1832808", "CSAFPID-1832809", "CSAFPID-1832810", "CSAFPID-1832811", "CSAFPID-1832812", "CSAFPID-1832815", "CSAFPID-1832816", "CSAFPID-1832817", "CSAFPID-2733624", "CSAFPID-2858634", "CSAFPID-3010676", "CSAFPID-3773471", "CSAFPID-39373", "CSAFPID-39374", "CSAFPID-39376", "CSAFPID-448", "CSAFPID-4626302", "CSAFPID-4626303", "CSAFPID-4847758", "CSAFPID-4847759", "CSAFPID-4847760", "CSAFPID-4847761", "CSAFPID-4950548", "CSAFPID-5002922", "CSAFPID-5490268", "CSAFPID-5490269", "CSAFPID-5490270", "CSAFPID-5490271", "CSAFPID-5490274", "CSAFPID-5490275", "CSAFPID-5526552", "CSAFPID-5836725", "CSAFPID-5836726", "CSAFPID-5836727", "CSAFPID-5836728", "CSAFPID-5836729", "CSAFPID-5836730", "CSAFPID-5836731", "CSAFPID-5836732", "CSAFPID-5836733", "CSAFPID-5836734", "CSAFPID-5836735", "CSAFPID-5836736", "CSAFPID-5836737", "CSAFPID-5836738", "CSAFPID-5836739", "CSAFPID-5836740", "CSAFPID-5836741", "CSAFPID-5850922", "CSAFPID-5850923", "CSAFPID-5958826", "CSAFPID-5958827", "CSAFPID-5958828", "CSAFPID-5958829", "CSAFPID-5958830", "CSAFPID-5958831", "CSAFPID-5958832", "CSAFPID-5958833", "CSAFPID-5958834", "CSAFPID-5958835", "CSAFPID-5958836", "CSAFPID-5958837", "CSAFPID-5958838", "CSAFPID-6062831", "CSAFPID-6062832", "CSAFPID-6062833", "CSAFPID-6062834", "CSAFPID-6062835", "CSAFPID-6062836", "CSAFPID-6062874", "CSAFPID-6062875", "CSAFPID-6062876", "CSAFPID-6062877", "CSAFPID-6062878", "CSAFPID-6062879", "CSAFPID-6062880", "CSAFPID-6062881", "CSAFPID-6062882", "CSAFPID-6062883", "CSAFPID-6062884", "CSAFPID-6062885", "CSAFPID-6062886", "CSAFPID-6062898", "CSAFPID-6062899", "CSAFPID-6062900", "CSAFPID-6062901", "CSAFPID-6062902", "CSAFPID-6332536", "CSAFPID-7944913", "CSAFPID-7944914", "CSAFPID-7944915", "CSAFPID-7944916", "CSAFPID-7987382", "CSAFPID-8256970", "CSAFPID-8256971", "CSAFPID-8256972", "CSAFPID-8258839", "CSAFPID-8263209", "CSAFPID-8263212", "CSAFPID-8263215", "CSAFPID-8263218", "CSAFPID-8263219", "CSAFPID-8263220", "CSAFPID-8263316", "CSAFPID-8263317", "CSAFPID-8263318", "CSAFPID-8263319", "CSAFPID-8263566", "CSAFPID-8263567", "CSAFPID-8263568", "CSAFPID-8263569", "CSAFPID-8263570", "CSAFPID-8263571", "CSAFPID-8464653", "CSAFPID-8464654", "CSAFPID-8464655", "CSAFPID-8467206", "CSAFPID-8467208", "CSAFPID-8467209", "CSAFPID-8474099", "CSAFPID-8514263", "CSAFPID-8518164", "CSAFPID-8528311", "CSAFPID-8528312", "CSAFPID-8548555", "CSAFPID-8548556", "CSAFPID-8548557", "CSAFPID-8564473", "CSAFPID-8564474", "CSAFPID-8564476", "CSAFPID-8564477", "CSAFPID-8870622", "CSAFPID-8878801", "CSAFPID-8878802", "CSAFPID-8879391", "CSAFPID-8914934", "CSAFPID-8948588", "CSAFPID-9499" ] } ], "threats": [ { "category": "impact", "details": "Successful exploitation of this vulnerability could lead to Denial of Service (DoS).", "product_ids": [ "CSAFPID-5002922", "CSAFPID-5526552", "CSAFPID-8474099" ] } ], "title": "CVE-2026-42764" } ] }