RHSA-2024:2447
Vulnerability from csaf_redhat
Published
2024-04-30 10:36
Modified
2025-03-15 03:08
Summary
Red Hat Security Advisory: openssl and openssl-fips-provider security update

Notes

Topic
An update for openssl and openssl-fips-provider is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library. Security Fix(es): * openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975) * openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446) * OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817) * openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678) * openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129) * openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237) * openssl: denial of service via null dereference (CVE-2024-0727) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.


To clipboard 

{
   document: {
      aggregate_severity: {
         namespace: "https://access.redhat.com/security/updates/classification/",
         text: "Low",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright © Red Hat, Inc. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "An update for openssl and openssl-fips-provider is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
            title: "Topic",
         },
         {
            category: "general",
            text: "OpenSSL is a toolkit that implements the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols, as well as a full-strength general-purpose cryptography library.\n\nSecurity Fix(es):\n\n* openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries (CVE-2023-2975)\n\n* openssl: Excessive time spent checking DH keys and parameters (CVE-2023-3446)\n\n* OpenSSL: Excessive time spent checking DH q parameter value (CVE-2023-3817)\n\n* openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow (CVE-2023-5678)\n\n* openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)\n\n* openssl: Excessive time spent checking invalid RSA public keys (CVE-2023-6237)\n\n* openssl: denial of service via null dereference (CVE-2024-0727)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Red Hat Enterprise Linux 9.4 Release Notes linked from the References section.",
            title: "Details",
         },
         {
            category: "legal_disclaimer",
            text: "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
            title: "Terms of Use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://access.redhat.com/security/team/contact/",
         issuing_authority: "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
         name: "Red Hat Product Security",
         namespace: "https://www.redhat.com",
      },
      references: [
         {
            category: "self",
            summary: "https://access.redhat.com/errata/RHSA-2024:2447",
            url: "https://access.redhat.com/errata/RHSA-2024:2447",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/security/updates/classification/#low",
            url: "https://access.redhat.com/security/updates/classification/#low",
         },
         {
            category: "external",
            summary: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
            url: "https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index",
         },
         {
            category: "external",
            summary: "2223016",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2223016",
         },
         {
            category: "external",
            summary: "2224962",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
         },
         {
            category: "external",
            summary: "2227852",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
         },
         {
            category: "external",
            summary: "2248616",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
         },
         {
            category: "external",
            summary: "2257571",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
         },
         {
            category: "external",
            summary: "2258502",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
         },
         {
            category: "external",
            summary: "2259944",
            url: "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
         },
         {
            category: "external",
            summary: "RHEL-14083",
            url: "https://issues.redhat.com/browse/RHEL-14083",
         },
         {
            category: "external",
            summary: "RHEL-15990",
            url: "https://issues.redhat.com/browse/RHEL-15990",
         },
         {
            category: "external",
            summary: "RHEL-17104",
            url: "https://issues.redhat.com/browse/RHEL-17104",
         },
         {
            category: "external",
            summary: "RHEL-17193",
            url: "https://issues.redhat.com/browse/RHEL-17193",
         },
         {
            category: "external",
            summary: "RHEL-1780",
            url: "https://issues.redhat.com/browse/RHEL-1780",
         },
         {
            category: "external",
            summary: "RHEL-20249",
            url: "https://issues.redhat.com/browse/RHEL-20249",
         },
         {
            category: "external",
            summary: "RHEL-5295",
            url: "https://issues.redhat.com/browse/RHEL-5295",
         },
         {
            category: "external",
            summary: "RHEL-5304",
            url: "https://issues.redhat.com/browse/RHEL-5304",
         },
         {
            category: "self",
            summary: "Canonical URL",
            url: "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2447.json",
         },
      ],
      title: "Red Hat Security Advisory: openssl and openssl-fips-provider security update",
      tracking: {
         current_release_date: "2025-03-15T03:08:56+00:00",
         generator: {
            date: "2025-03-15T03:08:56+00:00",
            engine: {
               name: "Red Hat SDEngine",
               version: "4.4.1",
            },
         },
         id: "RHSA-2024:2447",
         initial_release_date: "2024-04-30T10:36:25+00:00",
         revision_history: [
            {
               date: "2024-04-30T10:36:25+00:00",
               number: "1",
               summary: "Initial version",
            },
            {
               date: "2024-04-30T10:36:25+00:00",
               number: "2",
               summary: "Last updated version",
            },
            {
               date: "2025-03-15T03:08:56+00:00",
               number: "3",
               summary: "Last generated version",
            },
         ],
         status: "final",
         version: "3",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux BaseOS (v. 9)",
                        product: {
                           name: "Red Hat Enterprise Linux BaseOS (v. 9)",
                           product_id: "BaseOS-9.4.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/o:redhat:enterprise_linux:9::baseos",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "Red Hat Enterprise Linux AppStream (v. 9)",
                        product: {
                           name: "Red Hat Enterprise Linux AppStream (v. 9)",
                           product_id: "AppStream-9.4.0.GA",
                           product_identification_helper: {
                              cpe: "cpe:/a:redhat:enterprise_linux:9::appstream",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "Red Hat Enterprise Linux",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.src",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.src",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=src",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-1:3.0.7-27.el9.src",
                        product: {
                           name: "openssl-1:3.0.7-27.el9.src",
                           product_id: "openssl-1:3.0.7-27.el9.src",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=src&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "src",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                        product: {
                           name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                           product_id: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                        product: {
                           name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                           product_id: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=aarch64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-devel-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-devel-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-perl-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-perl-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debugsource-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-debugsource-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-debugsource-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-1:3.0.7-27.el9.aarch64",
                        product: {
                           name: "openssl-libs-1:3.0.7-27.el9.aarch64",
                           product_id: "openssl-libs-1:3.0.7-27.el9.aarch64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=aarch64&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                        product: {
                           name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                           product_id: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                        product: {
                           name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                           product_id: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=ppc64le",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-devel-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-devel-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-perl-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-perl-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-1:3.0.7-27.el9.ppc64le",
                        product: {
                           name: "openssl-libs-1:3.0.7-27.el9.ppc64le",
                           product_id: "openssl-libs-1:3.0.7-27.el9.ppc64le",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=ppc64le&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.i686",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.i686",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                        product: {
                           name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                           product_id: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                        product: {
                           name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                           product_id: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=i686",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-1:3.0.7-27.el9.i686",
                        product: {
                           name: "openssl-devel-1:3.0.7-27.el9.i686",
                           product_id: "openssl-devel-1:3.0.7-27.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=i686&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debugsource-1:3.0.7-27.el9.i686",
                        product: {
                           name: "openssl-debugsource-1:3.0.7-27.el9.i686",
                           product_id: "openssl-debugsource-1:3.0.7-27.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=i686&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-1:3.0.7-27.el9.i686",
                        product: {
                           name: "openssl-debuginfo-1:3.0.7-27.el9.i686",
                           product_id: "openssl-debuginfo-1:3.0.7-27.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=i686&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                        product: {
                           name: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                           product_id: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=i686&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-1:3.0.7-27.el9.i686",
                        product: {
                           name: "openssl-libs-1:3.0.7-27.el9.i686",
                           product_id: "openssl-libs-1:3.0.7-27.el9.i686",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=i686&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i686",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                        product: {
                           name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                           product_id: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                        product: {
                           name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                           product_id: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=x86_64",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-devel-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-devel-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-perl-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-perl-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debugsource-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-debugsource-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-debugsource-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-1:3.0.7-27.el9.x86_64",
                        product: {
                           name: "openssl-libs-1:3.0.7-27.el9.x86_64",
                           product_id: "openssl-libs-1:3.0.7-27.el9.x86_64",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=x86_64&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-0:3.0.7-2.el9.s390x",
                        product: {
                           name: "openssl-fips-provider-0:3.0.7-2.el9.s390x",
                           product_id: "openssl-fips-provider-0:3.0.7-2.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider@3.0.7-2.el9?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                        product: {
                           name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                           product_id: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debugsource@3.0.7-2.el9?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                        product: {
                           name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                           product_id: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-fips-provider-debuginfo@3.0.7-2.el9?arch=s390x",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-devel-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-devel-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-devel-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-devel@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-perl-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-perl-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-perl-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-perl@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debugsource-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-debugsource-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-debugsource-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debugsource@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-debuginfo-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-debuginfo-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-debuginfo-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-debuginfo@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs-debuginfo@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                     {
                        category: "product_version",
                        name: "openssl-libs-1:3.0.7-27.el9.s390x",
                        product: {
                           name: "openssl-libs-1:3.0.7-27.el9.s390x",
                           product_id: "openssl-libs-1:3.0.7-27.el9.s390x",
                           product_identification_helper: {
                              purl: "pkg:rpm/redhat/openssl-libs@3.0.7-27.el9?arch=s390x&epoch=1",
                           },
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
            ],
            category: "vendor",
            name: "Red Hat",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
            },
            product_reference: "openssl-1:3.0.7-27.el9.src",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
               product_id: "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "AppStream-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
            },
            product_reference: "openssl-1:3.0.7-27.el9.src",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-debuginfo-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-debugsource-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-debugsource-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-devel-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-devel-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.src",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
            },
            product_reference: "openssl-fips-provider-0:3.0.7-2.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
            },
            product_reference: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
            },
            product_reference: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
            },
            product_reference: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
            },
            product_reference: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
            },
            product_reference: "openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
            },
            product_reference: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
            },
            product_reference: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
            },
            product_reference: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
            },
            product_reference: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            },
            product_reference: "openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-libs-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.aarch64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.ppc64le",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.s390x",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "openssl-perl-1:3.0.7-27.el9.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
               product_id: "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            },
            product_reference: "openssl-perl-1:3.0.7-27.el9.x86_64",
            relates_to_product_reference: "BaseOS-9.4.0.GA",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-2975",
         discovery_date: "2023-07-14T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2223016",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in OpenSSL. The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries, which are unauthenticated as a consequence. Applications that use the AES-SIV algorithm and want to authenticate empty data entries as associated data can be misled by removing, adding, or reordering such empty entries as these are ignored by the OpenSSL implementation. The AES-SIV algorithm allows for the authentication of multiple associated data entries and encryption. To authenticate empty data, the application has to call EVP_EncryptUpdate() (or EVP_CipherUpdate()) with a NULL pointer as the output buffer and 0 as the input buffer length. The AES-SIV implementation in OpenSSL returns success for such a call instead of performing the associated data authentication operation. Thus, the empty data will not be authenticated.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This issue does not affect Red Hat Enterprise Linux 6, 7, and 8 as the vulnerable OpenSSL package is currently not shipped. As this issue does not affect non-empty associated data authentication and we expect it to be rare for an application to use empty associated data entries, this is rated with a Low severity.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-2975",
            },
            {
               category: "external",
               summary: "RHBZ#2223016",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2223016",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-2975",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-2975",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-2975",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-2975",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20230714.txt",
               url: "https://www.openssl.org/news/secadv/20230714.txt",
            },
         ],
         release_date: "2023-07-07T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries",
      },
      {
         cve: "CVE-2023-3446",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         discovery_date: "2023-07-24T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2224962",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in OpenSSL. This security flaw occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: Excessive time spent checking DH keys and parameters",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "The CVE-2023-3446 vulnerability in OpenSSL has been classified as having a low impact due to several factors. Firstly, while the potential for a Denial of Service (DoS) attack exists, it requires specific conditions to be met, notably the use of DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions with DH keys or parameters obtained from untrusted sources. Secondly, the issue primarily affects the efficiency of key and parameter checks, rather than directly compromising the security or integrity of cryptographic operations. Given these considerations and the absence of widespread exploitation or significant consequences beyond performance degradation, the overall impact of this vulnerability is deemed low rather than moderate.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-3446",
            },
            {
               category: "external",
               summary: "RHBZ#2224962",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2224962",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-3446",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-3446",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-3446",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-3446",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20230719.txt",
               url: "https://www.openssl.org/news/secadv/20230719.txt",
            },
         ],
         release_date: "2023-07-19T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: Excessive time spent checking DH keys and parameters",
      },
      {
         cve: "CVE-2023-3817",
         discovery_date: "2023-07-31T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2227852",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A vulnerability was found in OpenSSL. This security issue occurs because the applications that use the DH_check(), DH_check_ex(), or EVP_PKEY_param_check() functions to check a DH key or DH parameters may experience long delays. Where the key or parameters that are being checked have been obtained from an untrusted source may lead to a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "OpenSSL: Excessive time spent checking DH q parameter value",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This vulnerability in OpenSSL is considered low severity primarily because it requires specific conditions to be exploited and has limited impact. While excessive computation time during DH parameter checks could potentially lead to denial of service (DoS) attacks, the likelihood of successful exploitation is relatively low. Additionally, the vulnerability mainly affects applications that use certain OpenSSL functions for DH parameter validation, rather than the broader SSL/TLS implementation.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-3817",
            },
            {
               category: "external",
               summary: "RHBZ#2227852",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2227852",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-3817",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-3817",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-3817",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-3817",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20230731.txt",
               url: "https://www.openssl.org/news/secadv/20230731.txt",
            },
         ],
         release_date: "2023-07-31T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "OpenSSL: Excessive time spent checking DH q parameter value",
      },
      {
         cve: "CVE-2023-5678",
         cwe: {
            id: "CWE-325",
            name: "Missing Cryptographic Step",
         },
         discovery_date: "2023-11-07T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2248616",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenSSL, which caused the generation or checking of long X9.42 DH keys or parameters to be much slower than expected. This issue could lead to a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This vulnerability in OpenSSL is categorized as a low severity issue primarily because it requires specific conditions to exploit and doesn't directly result in a full Denial of Service (DoS). While the excessive time spent in DH key generation or verification could potentially cause delays, the impact is mitigated by the fact that it requires untrusted sources supplying large Q parameter values. Additionally, the OpenSSL SSL/TLS implementation remains unaffected, limiting the scope of potential attacks. Moreover, there are inherent limits on key length, which further restrict the potential for exploitation.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-5678",
            },
            {
               category: "external",
               summary: "RHBZ#2248616",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2248616",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-5678",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-5678",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-5678",
            },
            {
               category: "external",
               summary: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
               url: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=34efaef6c103d636ab507a0cc34dca4d3aecc055",
            },
            {
               category: "external",
               summary: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
               url: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=710fee740904b6290fef0dd5536fbcedbc38ff0c",
            },
            {
               category: "external",
               summary: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
               url: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=db925ae2e65d0d925adef429afc37f75bd1c2017",
            },
            {
               category: "external",
               summary: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
               url: "https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=ddeb4b6c6d527e54ce9a99cba785c0f7776e54b6",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20231106.txt",
               url: "https://www.openssl.org/news/secadv/20231106.txt",
            },
         ],
         release_date: "2023-10-24T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow",
      },
      {
         cve: "CVE-2023-6129",
         cwe: {
            id: "CWE-328",
            name: "Use of Weak Hash",
         },
         discovery_date: "2024-01-10T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2257571",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in in the POLY1305 MAC (message authentication code) implementation in OpenSSL, affecting applications running on PowerPC CPU-based platforms that utilize vector instructions, and has the potential to corrupt the internal state of these applications. If an attacker can manipulate the utilization of the POLY1305 MAC algorithm, it may lead to the corruption of the application state, resulting in various application-dependent consequences, often resulting in a crash and leading to a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This vulnerability is categorized as having a Low severity due to the limited scope of its potential impact and the specific conditions required for exploitation. The vulnerability arises in the POLY1305 MAC implementation within OpenSSL on PowerPC CPUs, affecting newer processors supporting PowerISA 2.07 instructions. The issue involves the restoration of vector registers in a different order than they are saved, potentially corrupting application state upon return to the caller. The impact varies, contingent on the application's reliance on non-volatile XMM registers, ranging from incorrect calculations to potential denial of service. However, the practical exploitation of this vulnerability requires an attacker to influence the use of the POLY1305 MAC algorithm. Given the specific conditions needed for exploitation and the absence of concrete instances of affected applications, the overall risk is assessed as low. Additionally, the severity is tempered by the assumption that the most likely outcome is limited to incorrect results in application-dependent calculations or crashes, rather than enabling a full compromise of the application process.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-6129",
            },
            {
               category: "external",
               summary: "RHBZ#2257571",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2257571",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-6129",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-6129",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-6129",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-6129",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20240109.txt",
               url: "https://www.openssl.org/news/secadv/20240109.txt",
            },
            {
               category: "external",
               summary: "https://www.openwall.com/lists/oss-security/2024/01/09/1",
               url: "https://www.openwall.com/lists/oss-security/2024/01/09/1",
            },
         ],
         release_date: "2024-01-09T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "LOW",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC",
      },
      {
         cve: "CVE-2023-6237",
         cwe: {
            id: "CWE-400",
            name: "Uncontrolled Resource Consumption",
         },
         discovery_date: "2024-01-15T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2258502",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenSSL. When the EVP_PKEY_public_check() function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large prime, this computation takes a long time. An application that calls EVP_PKEY_public_check() and supplies an RSA key obtained from an untrusted source could be vulnerable to a Denial of Service attack.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: Excessive time spent checking invalid RSA public keys",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "Red Hat Product Security rates the severity of this flaw as determined by the upstream OpenSSL security team.\n\nThe marked moderate issue in OpenSSL involves a flaw in the EVP_PKEY_public_check() function used for RSA public keys. When verifying keys, the computation to confirm the composite nature of the RSA modulus may take an extended time if the modulus is a large prime. This vulnerability could be exploited for a Denial of Service attack in applications using this function with RSA keys from untrusted sources. The severity is moderate as it requires specific conditions for exploitation and may not pose an immediate widespread threat.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2023-6237",
            },
            {
               category: "external",
               summary: "RHBZ#2258502",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2258502",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2023-6237",
               url: "https://www.cve.org/CVERecord?id=CVE-2023-6237",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2023-6237",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2023-6237",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20240115.txt",
               url: "https://www.openssl.org/news/secadv/20240115.txt",
            },
            {
               category: "external",
               summary: "https://www.openwall.com/lists/oss-security/2024/01/15/2",
               url: "https://www.openwall.com/lists/oss-security/2024/01/15/2",
            },
         ],
         release_date: "2024-01-15T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 5.9,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: Excessive time spent checking invalid RSA public keys",
      },
      {
         cve: "CVE-2024-0727",
         cwe: {
            id: "CWE-476",
            name: "NULL Pointer Dereference",
         },
         discovery_date: "2024-01-23T00:00:00+00:00",
         flags: [
            {
               label: "vulnerable_code_not_present",
               product_ids: [
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
               ],
            },
         ],
         ids: [
            {
               system_name: "Red Hat Bugzilla ID",
               text: "2259944",
            },
         ],
         notes: [
            {
               category: "description",
               text: "A flaw was found in OpenSSL. The optional ContentInfo fields can be set to null, even if the \"type\" is a valid value, which can lead to a null dereference error that may cause a denial of service.",
               title: "Vulnerability description",
            },
            {
               category: "summary",
               text: "openssl: denial of service via null dereference",
               title: "Vulnerability summary",
            },
            {
               category: "other",
               text: "This vulnerability is classified as low severity. This is a result of a lack of proper validation in OpenSSL's handling of PKCS12 files. This vulnerability results in a potential Denial of Service scenario wherein maliciously crafted PKCS12 files may cause OpenSSL to crash due to a NULL pointer dereference. However, the impact of this issue is reduced by the fact that exploitation requires processing PKCS12 files from untrusted sources using specific OpenSSL APIs, such as PKCS12_parse(), PKCS12_unpack_p7data(), PKCS12_unpack_p7encdata(), PKCS12_unpack_authsafes(), and PKCS12_newpass(). Furthermore, while a similar issue was addressed in SMIME_write_PKCS7(), its relevance is diminished as it pertains to writing data rather than parsing, hence not considered security significant. The risk of this vulnerability is limited as Red Hat offerings do not utilize images from untrusted sources by default.",
               title: "Statement",
            },
            {
               category: "general",
               text: "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.",
               title: "CVSS score applicability",
            },
         ],
         product_status: {
            fixed: [
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
               "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
            ],
            known_not_affected: [
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
               "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
               "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
            ],
         },
         references: [
            {
               category: "self",
               summary: "Canonical URL",
               url: "https://access.redhat.com/security/cve/CVE-2024-0727",
            },
            {
               category: "external",
               summary: "RHBZ#2259944",
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=2259944",
            },
            {
               category: "external",
               summary: "https://www.cve.org/CVERecord?id=CVE-2024-0727",
               url: "https://www.cve.org/CVERecord?id=CVE-2024-0727",
            },
            {
               category: "external",
               summary: "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
               url: "https://nvd.nist.gov/vuln/detail/CVE-2024-0727",
            },
            {
               category: "external",
               summary: "https://github.com/openssl/openssl/pull/23362",
               url: "https://github.com/openssl/openssl/pull/23362",
            },
            {
               category: "external",
               summary: "https://www.openssl.org/news/secadv/20240125.txt",
               url: "https://www.openssl.org/news/secadv/20240125.txt",
            },
         ],
         release_date: "2024-01-22T00:00:00+00:00",
         remediations: [
            {
               category: "vendor_fix",
               date: "2024-04-30T10:36:25+00:00",
               details: "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nFor the update to take effect, all services linked to the OpenSSL library must be restarted, or the system rebooted.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
               restart_required: {
                  category: "none",
               },
               url: "https://access.redhat.com/errata/RHSA-2024:2447",
            },
            {
               category: "workaround",
               details: "Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
               product_ids: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  attackComplexity: "LOW",
                  attackVector: "LOCAL",
                  availabilityImpact: "HIGH",
                  baseScore: 5.5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "AppStream-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "AppStream-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.src",
                  "BaseOS-9.4.0.GA:openssl-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-debugsource-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-devel-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.src",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debuginfo-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-fips-provider-debugsource-0:3.0.7-2.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.i686",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-libs-debuginfo-1:3.0.7-27.el9.x86_64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.aarch64",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.ppc64le",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.s390x",
                  "BaseOS-9.4.0.GA:openssl-perl-1:3.0.7-27.el9.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               details: "Low",
            },
         ],
         title: "openssl: denial of service via null dereference",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.