{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat JBoss Web Server 5.2.0 zip release for RHEL 6, RHEL 7, RHEL 8 and Microsoft Windows is available.\n\nRed Hat Product Security has rated this update as having a security impact\nof Important. A Common Vulnerability Scoring System (CVSS) base score,\nwhich gives a detailed severity rating, is available for each vulnerability\nfrom the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library.\n \nRefer to the Release Notes for information on the most significant bug fixes, enhancements and component upgrades included in this release.\n\nSecurity Fix(es):\n\n* openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash) (CVE-2018-5407) \n* tomcat: XSS in SSI printenv (CVE-2019-0221) \n* openssl: 0-byte record padding oracle (CVE-2019-1559) \n* tomcat: HTTP/2 implementation leads to denial of service (CVE-2019-10072)\n* tomcat: Apache Tomcat HTTP/2 DoS (CVE-2019-0199)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2019:3931",
        "url": "https://access.redhat.com/errata/RHSA-2019:3931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "1645695",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
      },
      {
        "category": "external",
        "summary": "1683804",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1683804"
      },
      {
        "category": "external",
        "summary": "1693325",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693325"
      },
      {
        "category": "external",
        "summary": "1713275",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713275"
      },
      {
        "category": "external",
        "summary": "1723708",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723708"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_3931.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat JBoss Web Server 5.2 security release",
    "tracking": {
      "current_release_date": "2026-05-14T22:24:38+00:00",
      "generator": {
        "date": "2026-05-14T22:24:38+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2019:3931",
      "initial_release_date": "2019-11-20T16:04:24+00:00",
      "revision_history": [
        {
          "date": "2019-11-20T16:04:24+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2019-12-02T16:22:21+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-14T22:24:38+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat JBoss Web Server 5",
                "product": {
                  "name": "Red Hat JBoss Web Server 5",
                  "product_id": "Red Hat JBoss Web Server 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:jboss_enterprise_web_server:5.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat JBoss Web Server"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Alejandro Cabrera Aldaya"
          ],
          "organization": "Universidad Tecnologica de la Habana CUJAE; Cuba"
        },
        {
          "names": [
            "Billy Bob Brumley",
            "Cesar Pereida Garcia",
            "Sohaib ul Hassan"
          ]
        },
        {
          "names": [
            "Nicola Tuveri"
          ],
          "organization": "Tampere University of Technology; Finland"
        }
      ],
      "cve": "CVE-2018-5407",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2018-11-02T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1645695"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A microprocessor side-channel vulnerability was found on SMT (e.g, Hyper-Threading) architectures. An attacker running a malicious process on the same core of the processor as the victim process can extract certain secret information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is a timing side-channel flaw on processors which implement SMT/Hyper-Threading architectures. It can result in leakage of secret data in applications such as OpenSSL that has secret dependent control flow at any granularity level. In order to exploit this flaw, the attacker needs to run a malicious process on the same core of the processor as the victim process.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "RHBZ#1645695",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1645695"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2018-5407",
          "url": "https://www.cve.org/CVERecord?id=CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "https://github.com/bbbrumley/portsmash",
          "url": "https://github.com/bbbrumley/portsmash"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20181112.txt",
          "url": "https://www.openssl.org/news/secadv/20181112.txt"
        }
      ],
      "release_date": "2018-10-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:04:24+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3931"
        },
        {
          "category": "workaround",
          "details": "At this time Red Hat Engineering is working on patches for openssl package in Red Hat Enterprise Linux 7 to address this issue.  Until fixes are available, users are advised to review the guidance supplied in the L1 Terminal Fault vulnerability article: https://access.redhat.com/security/vulnerabilities/L1TF and decide what their exposure across shared CPU threads are and act accordingly.",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)"
    },
    {
      "cve": "CVE-2019-0199",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-03-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1693325"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Apache Tomcat, where the HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open, which enables them to cause server-side threads to block. This flaw eventually leads to a denial of service attack.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: Apache Tomcat HTTP/2 DoS",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "pki-servlet-container does not use HTTP/2 in its default configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0199"
        },
        {
          "category": "external",
          "summary": "RHBZ#1693325",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1693325"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0199",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0199"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0199",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0199"
        }
      ],
      "release_date": "2019-03-25T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:04:24+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3931"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "tomcat: Apache Tomcat HTTP/2 DoS"
    },
    {
      "cve": "CVE-2019-0221",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
      },
      "discovery_date": "2019-05-23T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1713275"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided data without escaping and is, therefore, vulnerable to XSS. SSI is disabled by default. The printenv command is intended for debugging and is unlikely to be present in a production website.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: XSS in SSI printenv",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-0221"
        },
        {
          "category": "external",
          "summary": "RHBZ#1713275",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1713275"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-0221",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-0221"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-0221",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0221"
        }
      ],
      "release_date": "2019-04-13T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:04:24+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3931"
        },
        {
          "category": "workaround",
          "details": "SSI is disabled in the default Tomcat configuration. The vulnerable printenv command is intended for debugging, and is recommended to not be enabled for a production website.",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.0,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Low"
        }
      ],
      "title": "tomcat: XSS in SSI printenv"
    },
    {
      "cve": "CVE-2019-1559",
      "cwe": {
        "id": "CWE-325",
        "name": "Missing Cryptographic Step"
      },
      "discovery_date": "2019-02-26T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1683804"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "openssl: 0-byte record padding oracle",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "1 For this issue to be exploitable, the (server) application using the OpenSSL library needs to use it incorrectly.\n2. There are multiple other requirements for the attack to succeed: \n    - The ciphersuite used must be obsolete CBC cipher without a stitched implementation (or the system be in FIPS mode)\n    - the attacker has to be a MITM\n    - the attacker has to be able to control the client side to send requests to the buggy server on demand",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "RHBZ#1683804",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1683804"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-1559",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-1559",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "https://github.com/RUB-NDS/TLS-Padding-Oracles",
          "url": "https://github.com/RUB-NDS/TLS-Padding-Oracles"
        },
        {
          "category": "external",
          "summary": "https://www.openssl.org/news/secadv/20190226.txt",
          "url": "https://www.openssl.org/news/secadv/20190226.txt"
        }
      ],
      "release_date": "2019-02-26T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:04:24+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3931"
        },
        {
          "category": "workaround",
          "details": "As a workaround you can disable SHA384 if applications (compiled with OpenSSL) allow for adjustment of the ciphersuite string configuration.",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "openssl: 0-byte record padding oracle"
    },
    {
      "cve": "CVE-2019-10072",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2019-06-25T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1723708"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat JBoss Web Server 5"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2019-10072"
        },
        {
          "category": "external",
          "summary": "RHBZ#1723708",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1723708"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2019-10072",
          "url": "https://www.cve.org/CVERecord?id=CVE-2019-10072"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2019-10072",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-10072"
        },
        {
          "category": "external",
          "summary": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.41",
          "url": "http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.41"
        },
        {
          "category": "external",
          "summary": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.20",
          "url": "http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.20"
        }
      ],
      "release_date": "2019-06-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2019-11-20T16:04:24+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2019:3931"
        },
        {
          "category": "workaround",
          "details": "pki-servlet-container does not use HTTP/2 in its default configuration.",
          "product_ids": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "Red Hat JBoss Web Server 5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl-1_0_0",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher\u0027s CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-572,SUSE-SLE-DESKTOP-12-SP4-2019-572,SUSE-SLE-SDK-12-SP4-2019-572,SUSE-SLE-SERVER-12-SP4-2019-572",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0572-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:0572-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190572-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:0572-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-March/005177.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl-1_0_0",
    "tracking": {
      "current_release_date": "2019-03-08T08:24:27Z",
      "generator": {
        "date": "2019-03-08T08:24:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:0572-1",
      "initial_release_date": "2019-03-08T08:24:27Z",
      "revision_history": [
        {
          "date": "2019-03-08T08:24:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.aarch64",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.aarch64",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.aarch64",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.aarch64",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                  "product_id": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.6.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-64bit-1.0.2p-3.6.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.6.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.6.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.i586",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.i586",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.i586",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.i586",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.i586",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.i586",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.i586",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.i586",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
                "product": {
                  "name": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
                  "product_id": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.ppc64le",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.ppc64le",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.s390",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.s390",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.s390x",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390x",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390x",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.6.1.x86_64",
                  "product_id": "openssl-1_0_0-1.0.2p-3.6.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.x86_64",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.6.1.x86_64",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.6.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP4",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP4",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP4",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch as component of SUSE Linux Enterprise Server 12 SP4",
          "product_id": "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch"
        },
        "product_reference": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.6.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.6.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP4",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch"
        },
        "product_reference": "openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:libopenssl1_0_0-hmac-32bit-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-1.0.2p-3.6.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssl-1_0_0-doc-1.0.2p-3.6.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP4:libopenssl-1_0_0-devel-1.0.2p-3.6.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-08T08:24:27Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl-1_0_0",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl-1_0_0 fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher\u0027s CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-600,SUSE-SLE-Module-Development-Tools-OBS-15-2019-600,SUSE-SLE-Module-Legacy-15-2019-600",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0600-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:0600-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190600-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:0600-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-March/005186.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl-1_0_0",
    "tracking": {
      "current_release_date": "2019-03-12T17:40:27Z",
      "generator": {
        "date": "2019-03-12T17:40:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:0600-1",
      "initial_release_date": "2019-03-12T17:40:27Z",
      "revision_history": [
        {
          "date": "2019-03-12T17:40:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.14.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.aarch64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.14.2.aarch64",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.14.2.aarch64",
                  "product_id": "openssl-1_0_0-1.0.2p-3.14.2.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.aarch64",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.aarch64",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.14.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                  "product_id": "libopenssl-1_0_0-devel-64bit-1.0.2p-3.14.2.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-64bit-1.0.2p-3.14.2.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.14.2.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-hmac-64bit-1.0.2p-3.14.2.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.i586",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.i586",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.14.2.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.14.2.i586",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.14.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.i586",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.i586",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.14.2.i586",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.14.2.i586",
                  "product_id": "openssl-1_0_0-1.0.2p-3.14.2.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.i586",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.i586",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.14.2.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-1_0_0-doc-1.0.2p-3.14.2.noarch",
                "product": {
                  "name": "openssl-1_0_0-doc-1.0.2p-3.14.2.noarch",
                  "product_id": "openssl-1_0_0-doc-1.0.2p-3.14.2.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.14.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.ppc64le",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
                  "product_id": "openssl-1_0_0-1.0.2p-3.14.2.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.ppc64le",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.ppc64le",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.14.2.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.14.2.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.14.2.s390x",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.14.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.s390x",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.14.2.s390x",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.14.2.s390x",
                  "product_id": "openssl-1_0_0-1.0.2p-3.14.2.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.s390x",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.s390x",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.14.2.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl-1_0_0-devel-32bit-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl1_0_0-32bit-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.14.2.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "openssl-1_0_0-1.0.2p-3.14.2.x86_64",
                  "product_id": "openssl-1_0_0-1.0.2p-3.14.2.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.x86_64",
                "product": {
                  "name": "openssl-1_0_0-cavs-1.0.2p-3.14.2.x86_64",
                  "product_id": "openssl-1_0_0-cavs-1.0.2p-3.14.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Legacy 15",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Legacy 15",
                  "product_id": "SUSE Linux Enterprise Module for Legacy 15",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-legacy:15"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64"
        },
        "product_reference": "libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.14.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.aarch64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.14.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.14.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.14.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2p-3.14.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.14.2.aarch64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.aarch64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.14.2.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.14.2.ppc64le as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.ppc64le"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.14.2.s390x as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.s390x"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.14.2.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1_0_0-1.0.2p-3.14.2.x86_64 as component of SUSE Linux Enterprise Module for Legacy 15",
          "product_id": "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.x86_64"
        },
        "product_reference": "openssl-1_0_0-1.0.2p-3.14.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Legacy 15"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.s390x",
          "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
          "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.aarch64",
          "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
          "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.s390x",
          "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl-1_0_0-devel-1.0.2p-3.14.2.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:libopenssl1_0_0-1.0.2p-3.14.2.x86_64",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.aarch64",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.ppc64le",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.s390x",
            "SUSE Linux Enterprise Module for Legacy 15:openssl-1_0_0-1.0.2p-3.14.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-12T17:40:27Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs4",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs4 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service \n  when HTTP connection are kept active (bsc#1127533).\n- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service\n  when HTTP connection are kept active (bsc#1127532).\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances \n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\t  \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-658,SUSE-SLE-Module-Web-Scripting-12-2019-658,SUSE-Storage-4-2019-658",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0658-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:0658-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190658-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:0658-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-March/005212.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127532",
        "url": "https://bugzilla.suse.com/1127532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127533",
        "url": "https://bugzilla.suse.com/1127533"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5737 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5739 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5739/"
      }
    ],
    "title": "Security update for nodejs4",
    "tracking": {
      "current_release_date": "2019-03-20T13:32:01Z",
      "generator": {
        "date": "2019-03-20T13:32:01Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:0658-1",
      "initial_release_date": "2019-03-20T13:32:01Z",
      "revision_history": [
        {
          "date": "2019-03-20T13:32:01Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs4-4.9.1-15.20.1.aarch64",
                "product": {
                  "name": "nodejs4-4.9.1-15.20.1.aarch64",
                  "product_id": "nodejs4-4.9.1-15.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs4-devel-4.9.1-15.20.1.aarch64",
                "product": {
                  "name": "nodejs4-devel-4.9.1-15.20.1.aarch64",
                  "product_id": "nodejs4-devel-4.9.1-15.20.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm4-4.9.1-15.20.1.aarch64",
                "product": {
                  "name": "npm4-4.9.1-15.20.1.aarch64",
                  "product_id": "npm4-4.9.1-15.20.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs4-4.9.1-15.20.1.i586",
                "product": {
                  "name": "nodejs4-4.9.1-15.20.1.i586",
                  "product_id": "nodejs4-4.9.1-15.20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs4-devel-4.9.1-15.20.1.i586",
                "product": {
                  "name": "nodejs4-devel-4.9.1-15.20.1.i586",
                  "product_id": "nodejs4-devel-4.9.1-15.20.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm4-4.9.1-15.20.1.i586",
                "product": {
                  "name": "npm4-4.9.1-15.20.1.i586",
                  "product_id": "npm4-4.9.1-15.20.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs4-docs-4.9.1-15.20.1.noarch",
                "product": {
                  "name": "nodejs4-docs-4.9.1-15.20.1.noarch",
                  "product_id": "nodejs4-docs-4.9.1-15.20.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs4-4.9.1-15.20.1.ppc64le",
                "product": {
                  "name": "nodejs4-4.9.1-15.20.1.ppc64le",
                  "product_id": "nodejs4-4.9.1-15.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs4-devel-4.9.1-15.20.1.ppc64le",
                "product": {
                  "name": "nodejs4-devel-4.9.1-15.20.1.ppc64le",
                  "product_id": "nodejs4-devel-4.9.1-15.20.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm4-4.9.1-15.20.1.ppc64le",
                "product": {
                  "name": "npm4-4.9.1-15.20.1.ppc64le",
                  "product_id": "npm4-4.9.1-15.20.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs4-4.9.1-15.20.1.x86_64",
                "product": {
                  "name": "nodejs4-4.9.1-15.20.1.x86_64",
                  "product_id": "nodejs4-4.9.1-15.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs4-devel-4.9.1-15.20.1.x86_64",
                "product": {
                  "name": "nodejs4-devel-4.9.1-15.20.1.x86_64",
                  "product_id": "nodejs4-devel-4.9.1-15.20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm4-4.9.1-15.20.1.x86_64",
                "product": {
                  "name": "npm4-4.9.1-15.20.1.x86_64",
                  "product_id": "npm4-4.9.1-15.20.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-web-scripting:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 4",
                "product": {
                  "name": "SUSE Enterprise Storage 4",
                  "product_id": "SUSE Enterprise Storage 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-4.9.1-15.20.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64"
        },
        "product_reference": "nodejs4-4.9.1-15.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-4.9.1-15.20.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le"
        },
        "product_reference": "nodejs4-4.9.1-15.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-4.9.1-15.20.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64"
        },
        "product_reference": "nodejs4-4.9.1-15.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-devel-4.9.1-15.20.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64"
        },
        "product_reference": "nodejs4-devel-4.9.1-15.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-devel-4.9.1-15.20.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le"
        },
        "product_reference": "nodejs4-devel-4.9.1-15.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-devel-4.9.1-15.20.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64"
        },
        "product_reference": "nodejs4-devel-4.9.1-15.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-docs-4.9.1-15.20.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch"
        },
        "product_reference": "nodejs4-docs-4.9.1-15.20.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm4-4.9.1-15.20.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64"
        },
        "product_reference": "npm4-4.9.1-15.20.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm4-4.9.1-15.20.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le"
        },
        "product_reference": "npm4-4.9.1-15.20.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm4-4.9.1-15.20.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
        },
        "product_reference": "npm4-4.9.1-15.20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-4.9.1-15.20.1.aarch64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64"
        },
        "product_reference": "nodejs4-4.9.1-15.20.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs4-4.9.1-15.20.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64"
        },
        "product_reference": "nodejs4-4.9.1-15.20.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-20T13:32:01Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    },
    {
      "cve": "CVE-2019-5737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5737",
          "url": "https://www.suse.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127532 for CVE-2019-5737",
          "url": "https://bugzilla.suse.com/1127532"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-20T13:32:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5737"
    },
    {
      "cve": "CVE-2019-5739",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5739"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service (DoS) attack vector. Node.js 6.17.0 introduces server.keepAliveTimeout and the 5-second default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5739",
          "url": "https://www.suse.com/security/cve/CVE-2019-5739"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127533 for CVE-2019-5739",
          "url": "https://bugzilla.suse.com/1127533"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-devel-4.9.1-15.20.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs4-docs-4.9.1-15.20.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm4-4.9.1-15.20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-20T13:32:01Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5739"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl fixes the following issues:\n\nSecurity issues fixed: \n\n- The 9 Lives of Bleichenbacher\u0027s CAT: Cache Attacks on TLS Implementations (bsc#1117951)\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances\n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nOther issues addressed: \n\n- Fixed IV handling in SHAEXT paths: aes/asm/aesni-sha*-x86_64.pl (bsc#1113975).\n- Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-803,SUSE-OpenStack-Cloud-7-2019-803,SUSE-OpenStack-Cloud-Magnum-Orchestration-7-2019-803,SUSE-SLE-DESKTOP-12-SP3-2019-803,SUSE-SLE-SAP-12-SP2-2019-803,SUSE-SLE-SDK-12-SP3-2019-803,SUSE-SLE-SERVER-12-SP2-2019-803,SUSE-SLE-SERVER-12-SP2-BCL-2019-803,SUSE-SLE-SERVER-12-SP3-2019-803,SUSE-Storage-4-2019-803",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0803-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:0803-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190803-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:0803-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-March/005266.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1100078",
        "url": "https://bugzilla.suse.com/1100078"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113975",
        "url": "https://bugzilla.suse.com/1113975"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl",
    "tracking": {
      "current_release_date": "2019-03-29T12:14:45Z",
      "generator": {
        "date": "2019-03-29T12:14:45Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:0803-1",
      "initial_release_date": "2019-03-29T12:14:45Z",
      "revision_history": [
        {
          "date": "2019-03-29T12:14:45Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.aarch64",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.aarch64",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.aarch64",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.aarch64",
                  "product_id": "openssl-1.0.2j-60.49.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.aarch64",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.aarch64",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-devel-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                  "product_id": "libopenssl-devel-64bit-1.0.2j-60.49.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-64bit-1.0.2j-60.49.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-hmac-64bit-1.0.2j-60.49.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-hmac-64bit-1.0.2j-60.49.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.i586",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.i586",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.i586",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.i586",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.i586",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.i586",
                  "product_id": "openssl-1.0.2j-60.49.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.i586",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.i586",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-doc-1.0.2j-60.49.1.noarch",
                "product": {
                  "name": "openssl-doc-1.0.2j-60.49.1.noarch",
                  "product_id": "openssl-doc-1.0.2j-60.49.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.ppc64le",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.ppc64le",
                  "product_id": "openssl-1.0.2j-60.49.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.ppc64le",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.ppc64le",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.s390",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.s390",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.s390",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.s390",
                  "product_id": "openssl-1.0.2j-60.49.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.s390",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.s390",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl-devel-32bit-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.s390x",
                  "product_id": "openssl-1.0.2j-60.49.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.s390x",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.s390x",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl-devel-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl-devel-32bit-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "openssl-1.0.2j-60.49.1.x86_64",
                  "product_id": "openssl-1.0.2j-60.49.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-cavs-1.0.2j-60.49.1.x86_64",
                "product": {
                  "name": "openssl-cavs-1.0.2j-60.49.1.x86_64",
                  "product_id": "openssl-cavs-1.0.2j-60.49.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 7",
                "product": {
                  "name": "SUSE OpenStack Cloud 7",
                  "product_id": "SUSE OpenStack Cloud 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-bcl:12:sp2"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 4",
                "product": {
                  "name": "SUSE Enterprise Storage 4",
                  "product_id": "SUSE Enterprise Storage 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP3",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP3:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP2",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP3",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Linux Enterprise Server 12 SP2-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Linux Enterprise Server 12 SP2-BCL",
          "product_id": "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP2-BCL"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Linux Enterprise Server 12 SP3",
          "product_id": "SUSE Linux Enterprise Server 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.aarch64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.aarch64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.ppc64le"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.s390x"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP3",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:libopenssl-devel-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl-devel-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:libopenssl1_0_0-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.2j-60.49.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:openssl-1.0.2j-60.49.1.x86_64"
        },
        "product_reference": "openssl-1.0.2j-60.49.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.2j-60.49.1.noarch as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:openssl-doc-1.0.2j-60.49.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.2j-60.49.1.noarch",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Enterprise Storage 4:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
          "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.s390x",
          "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.x86_64",
          "SUSE OpenStack Cloud 7:openssl-doc-1.0.2j-60.49.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:openssl-doc-1.0.2j-60.49.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Enterprise Storage 4:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-BCL:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP2-LTSS:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP2:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP3:openssl-doc-1.0.2j-60.49.1.noarch",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.ppc64le",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE Linux Enterprise Software Development Kit 12 SP3:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl-devel-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:libopenssl1_0_0-hmac-32bit-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.s390x",
            "SUSE OpenStack Cloud 7:openssl-1.0.2j-60.49.1.x86_64",
            "SUSE OpenStack Cloud 7:openssl-doc-1.0.2j-60.49.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-29T12:14:45Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for nodejs6",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for nodejs6 to version 6.17.0 fixes the following issues:\n\nSecurity issues fixed:\n\n\n- CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service \n  when HTTP connection are kept active (bsc#1127533).\n- CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service\n  when HTTP connection are kept active (bsc#1127532).\n- CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances \n  a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080).\n\nRelease Notes: https://nodejs.org/en/blog/release/v6.17.0/    \n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-818,SUSE-OpenStack-Cloud-7-2019-818,SUSE-OpenStack-Cloud-Crowbar-8-2019-818,SUSE-SLE-Module-Web-Scripting-12-2019-818,SUSE-Storage-4-2019-818",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_0818-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:0818-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20190818-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:0818-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-March/005269.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127532",
        "url": "https://bugzilla.suse.com/1127532"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127533",
        "url": "https://bugzilla.suse.com/1127533"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5737 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-5739 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-5739/"
      }
    ],
    "title": "Security update for nodejs6",
    "tracking": {
      "current_release_date": "2019-03-29T17:03:45Z",
      "generator": {
        "date": "2019-03-29T17:03:45Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:0818-1",
      "initial_release_date": "2019-03-29T17:03:45Z",
      "revision_history": [
        {
          "date": "2019-03-29T17:03:45Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.aarch64",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.aarch64",
                  "product_id": "nodejs6-6.17.0-11.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.aarch64",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.aarch64",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.aarch64",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.aarch64",
                  "product_id": "npm6-6.17.0-11.24.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.i586",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.i586",
                  "product_id": "nodejs6-6.17.0-11.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.i586",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.i586",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.i586",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.i586",
                  "product_id": "npm6-6.17.0-11.24.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-docs-6.17.0-11.24.1.noarch",
                "product": {
                  "name": "nodejs6-docs-6.17.0-11.24.1.noarch",
                  "product_id": "nodejs6-docs-6.17.0-11.24.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.ppc64le",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.ppc64le",
                  "product_id": "nodejs6-6.17.0-11.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.ppc64le",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.ppc64le",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.ppc64le",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.ppc64le",
                  "product_id": "npm6-6.17.0-11.24.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.s390",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.s390",
                  "product_id": "nodejs6-6.17.0-11.24.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.s390",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.s390",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.s390",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.s390",
                  "product_id": "npm6-6.17.0-11.24.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.s390x",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.s390x",
                  "product_id": "nodejs6-6.17.0-11.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.s390x",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.s390x",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.s390x",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.s390x",
                  "product_id": "npm6-6.17.0-11.24.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "nodejs6-6.17.0-11.24.1.x86_64",
                "product": {
                  "name": "nodejs6-6.17.0-11.24.1.x86_64",
                  "product_id": "nodejs6-6.17.0-11.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "nodejs6-devel-6.17.0-11.24.1.x86_64",
                "product": {
                  "name": "nodejs6-devel-6.17.0-11.24.1.x86_64",
                  "product_id": "nodejs6-devel-6.17.0-11.24.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "npm6-6.17.0-11.24.1.x86_64",
                "product": {
                  "name": "npm6-6.17.0-11.24.1.x86_64",
                  "product_id": "npm6-6.17.0-11.24.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 7",
                "product": {
                  "name": "SUSE OpenStack Cloud 7",
                  "product_id": "SUSE OpenStack Cloud 7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud:7"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud Crowbar 8",
                "product": {
                  "name": "SUSE OpenStack Cloud Crowbar 8",
                  "product_id": "SUSE OpenStack Cloud Crowbar 8",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-openstack-cloud-crowbar:8"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-module-web-scripting:12"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Enterprise Storage 4",
                "product": {
                  "name": "SUSE Enterprise Storage 4",
                  "product_id": "SUSE Enterprise Storage 4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:ses:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.aarch64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.aarch64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.s390x as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.s390x",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.x86_64 as component of SUSE OpenStack Cloud 7",
          "product_id": "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.x86_64 as component of SUSE OpenStack Cloud Crowbar 8",
          "product_id": "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud Crowbar 8"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-devel-6.17.0-11.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64"
        },
        "product_reference": "nodejs6-devel-6.17.0-11.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-devel-6.17.0-11.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le"
        },
        "product_reference": "nodejs6-devel-6.17.0-11.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-devel-6.17.0-11.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x"
        },
        "product_reference": "nodejs6-devel-6.17.0-11.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-devel-6.17.0-11.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "nodejs6-devel-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-docs-6.17.0-11.24.1.noarch as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch"
        },
        "product_reference": "nodejs6-docs-6.17.0-11.24.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm6-6.17.0-11.24.1.aarch64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64"
        },
        "product_reference": "npm6-6.17.0-11.24.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm6-6.17.0-11.24.1.ppc64le as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le"
        },
        "product_reference": "npm6-6.17.0-11.24.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm6-6.17.0-11.24.1.s390x as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x"
        },
        "product_reference": "npm6-6.17.0-11.24.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "npm6-6.17.0-11.24.1.x86_64 as component of SUSE Linux Enterprise Module for Web and Scripting 12",
          "product_id": "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "npm6-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Web and Scripting 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.aarch64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.aarch64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "nodejs6-6.17.0-11.24.1.x86_64 as component of SUSE Enterprise Storage 4",
          "product_id": "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64"
        },
        "product_reference": "nodejs6-6.17.0-11.24.1.x86_64",
        "relates_to_product_reference": "SUSE Enterprise Storage 4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-29T17:03:45Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    },
    {
      "cve": "CVE-2019-5737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service (DoS) by establishing an HTTP or HTTPS connection in keep-alive mode and by sending headers very slowly. This keeps the connection and associated resources alive for a long period of time. Potential attacks are mitigated by the use of a load balancer or other proxy layer. This vulnerability is an extension of CVE-2018-12121, addressed in November and impacts all active Node.js release lines including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5737",
          "url": "https://www.suse.com/security/cve/CVE-2019-5737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127532 for CVE-2019-5737",
          "url": "https://bugzilla.suse.com/1127532"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-29T17:03:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5737"
    },
    {
      "cve": "CVE-2019-5739",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-5739"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Keep-alive HTTP and HTTPS connections can remain open and inactive for up to 2 minutes in Node.js 6.16.0 and earlier. Node.js 8.0.0 introduced a dedicated server.keepAliveTimeout which defaults to 5 seconds. The behavior in Node.js 6.16.0 and earlier is a potential Denial of Service (DoS) attack vector. Node.js 6.17.0 introduces server.keepAliveTimeout and the 5-second default.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
          "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
          "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
          "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-5739",
          "url": "https://www.suse.com/security/cve/CVE-2019-5739"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127533 for CVE-2019-5739",
          "url": "https://bugzilla.suse.com/1127533"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Enterprise Storage 4:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-devel-6.17.0-11.24.1.x86_64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:nodejs6-docs-6.17.0-11.24.1.noarch",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.aarch64",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.ppc64le",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.s390x",
            "SUSE Linux Enterprise Module for Web and Scripting 12:npm6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.aarch64",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.s390x",
            "SUSE OpenStack Cloud 7:nodejs6-6.17.0-11.24.1.x86_64",
            "SUSE OpenStack Cloud Crowbar 8:nodejs6-6.17.0-11.24.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-03-29T17:03:45Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2019-5739"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2019-1559: Fixed a 0-byte record padding oracle via SSL_shutdown (bsc#1127080).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-1362,SUSE-SLE-SAP-12-SP1-2019-1362,SUSE-SLE-SERVER-12-SP1-2019-1362",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1362-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:1362-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191362-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:1362-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-May/005508.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl",
    "tracking": {
      "current_release_date": "2019-05-28T08:50:04Z",
      "generator": {
        "date": "2019-05-28T08:50:04Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:1362-1",
      "initial_release_date": "2019-05-28T08:50:04Z",
      "revision_history": [
        {
          "date": "2019-05-28T08:50:04Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.aarch64",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.aarch64",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.aarch64",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.aarch64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.aarch64",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.aarch64",
                  "product_id": "openssl-1.0.1i-54.26.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-devel-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                  "product_id": "libopenssl-devel-64bit-1.0.1i-54.26.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-64bit-1.0.1i-54.26.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-hmac-64bit-1.0.1i-54.26.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-hmac-64bit-1.0.1i-54.26.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.i586",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.i586",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.i586",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.i586",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.i586",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.i586",
                  "product_id": "openssl-1.0.1i-54.26.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-doc-1.0.1i-54.26.1.noarch",
                "product": {
                  "name": "openssl-doc-1.0.1i-54.26.1.noarch",
                  "product_id": "openssl-doc-1.0.1i-54.26.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.ppc64le",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.ppc64le",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.ppc64le",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.ppc64le",
                  "product_id": "openssl-1.0.1i-54.26.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.s390",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.s390",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.s390",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.s390",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.s390",
                  "product_id": "openssl-1.0.1i-54.26.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl-devel-32bit-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.s390x",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.s390x",
                  "product_id": "openssl-1.0.1i-54.26.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl-devel-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl-devel-32bit-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-54.26.1.x86_64",
                "product": {
                  "name": "openssl-1.0.1i-54.26.1.x86_64",
                  "product_id": "openssl-1.0.1i-54.26.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "openssl-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.1i-54.26.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-54.26.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.1i-54.26.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-54.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-54.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-54.26.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-54.26.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.ppc64le"
        },
        "product_reference": "openssl-1.0.1i-54.26.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-54.26.1.s390x as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.s390x"
        },
        "product_reference": "openssl-1.0.1i-54.26.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-54.26.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.x86_64"
        },
        "product_reference": "openssl-1.0.1i-54.26.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.1i-54.26.1.noarch as component of SUSE Linux Enterprise Server 12 SP1-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-doc-1.0.1i-54.26.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.1i-54.26.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-doc-1.0.1i-54.26.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-54.26.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-54.26.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-doc-1.0.1i-54.26.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-54.26.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1-LTSS:openssl-doc-1.0.1i-54.26.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:libopenssl1_0_0-hmac-32bit-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-1.0.1i-54.26.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:openssl-doc-1.0.1i-54.26.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-05-28T08:50:04Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl1",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl1 fixes the following security issues:\n\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Reject invalid EC point coordinates (bsc#1131291)\n- Fixed \u0027The 9 Lives of Bleichenbacher\u0027s CAT: Cache ATtacks on TLS Implementations\u0027 (bsc#1117951)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "secsp3-openssl1-14091",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14091-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:14091-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914091-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:14091-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005585.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131291",
        "url": "https://bugzilla.suse.com/1131291"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl1",
    "tracking": {
      "current_release_date": "2019-06-18T16:28:44Z",
      "generator": {
        "date": "2019-06-18T16:28:44Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:14091-1",
      "initial_release_date": "2019-06-18T16:28:44Z",
      "revision_history": [
        {
          "date": "2019-06-18T16:28:44Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl1-devel-1.0.1g-0.58.18.1.i586",
                "product": {
                  "name": "libopenssl1-devel-1.0.1g-0.58.18.1.i586",
                  "product_id": "libopenssl1-devel-1.0.1g-0.58.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
                  "product_id": "libopenssl1_0_0-1.0.1g-0.58.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-1.0.1g-0.58.18.1.i586",
                "product": {
                  "name": "openssl1-1.0.1g-0.58.18.1.i586",
                  "product_id": "openssl1-1.0.1g-0.58.18.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-doc-1.0.1g-0.58.18.1.i586",
                "product": {
                  "name": "openssl1-doc-1.0.1g-0.58.18.1.i586",
                  "product_id": "openssl1-doc-1.0.1g-0.58.18.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
                "product": {
                  "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
                  "product_id": "libopenssl1-devel-1.0.1g-0.58.18.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
                  "product_id": "libopenssl1_0_0-1.0.1g-0.58.18.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-1.0.1g-0.58.18.1.ia64",
                "product": {
                  "name": "openssl1-1.0.1g-0.58.18.1.ia64",
                  "product_id": "openssl1-1.0.1g-0.58.18.1.ia64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-doc-1.0.1g-0.58.18.1.ia64",
                "product": {
                  "name": "openssl1-doc-1.0.1g-0.58.18.1.ia64",
                  "product_id": "openssl1-doc-1.0.1g-0.58.18.1.ia64"
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
                "product": {
                  "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
                  "product_id": "libopenssl1-devel-1.0.1g-0.58.18.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
                  "product_id": "libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-1.0.1g-0.58.18.1.ppc64",
                "product": {
                  "name": "openssl1-1.0.1g-0.58.18.1.ppc64",
                  "product_id": "openssl1-1.0.1g-0.58.18.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-doc-1.0.1g-0.58.18.1.ppc64",
                "product": {
                  "name": "openssl1-doc-1.0.1g-0.58.18.1.ppc64",
                  "product_id": "openssl1-doc-1.0.1g-0.58.18.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
                "product": {
                  "name": "libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
                  "product_id": "libopenssl1-devel-1.0.1g-0.58.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
                  "product_id": "libopenssl1_0_0-1.0.1g-0.58.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-1.0.1g-0.58.18.1.s390x",
                "product": {
                  "name": "openssl1-1.0.1g-0.58.18.1.s390x",
                  "product_id": "openssl1-1.0.1g-0.58.18.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-doc-1.0.1g-0.58.18.1.s390x",
                "product": {
                  "name": "openssl1-doc-1.0.1g-0.58.18.1.s390x",
                  "product_id": "openssl1-doc-1.0.1g-0.58.18.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
                "product": {
                  "name": "libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
                  "product_id": "libopenssl1-devel-1.0.1g-0.58.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-1.0.1g-0.58.18.1.x86_64",
                "product": {
                  "name": "openssl1-1.0.1g-0.58.18.1.x86_64",
                  "product_id": "openssl1-1.0.1g-0.58.18.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl1-doc-1.0.1g-0.58.18.1.x86_64",
                "product": {
                  "name": "openssl1-doc-1.0.1g-0.58.18.1.x86_64",
                  "product_id": "openssl1-doc-1.0.1g-0.58.18.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11-SECURITY",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_id": "SUSE Linux Enterprise Server 11-SECURITY",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:11:security"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1-devel-1.0.1g-0.58.18.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.i586"
        },
        "product_reference": "libopenssl1-devel-1.0.1g-0.58.18.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ia64"
        },
        "product_reference": "libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1-devel-1.0.1g-0.58.18.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ppc64"
        },
        "product_reference": "libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1-devel-1.0.1g-0.58.18.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.s390x"
        },
        "product_reference": "libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1-devel-1.0.1g-0.58.18.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.x86_64"
        },
        "product_reference": "libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.i586"
        },
        "product_reference": "libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ia64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-1.0.1g-0.58.18.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.i586"
        },
        "product_reference": "openssl1-1.0.1g-0.58.18.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-1.0.1g-0.58.18.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ia64"
        },
        "product_reference": "openssl1-1.0.1g-0.58.18.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-1.0.1g-0.58.18.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ppc64"
        },
        "product_reference": "openssl1-1.0.1g-0.58.18.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-1.0.1g-0.58.18.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.s390x"
        },
        "product_reference": "openssl1-1.0.1g-0.58.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-1.0.1g-0.58.18.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.x86_64"
        },
        "product_reference": "openssl1-1.0.1g-0.58.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-doc-1.0.1g-0.58.18.1.i586 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.i586"
        },
        "product_reference": "openssl1-doc-1.0.1g-0.58.18.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-doc-1.0.1g-0.58.18.1.ia64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ia64"
        },
        "product_reference": "openssl1-doc-1.0.1g-0.58.18.1.ia64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-doc-1.0.1g-0.58.18.1.ppc64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ppc64"
        },
        "product_reference": "openssl1-doc-1.0.1g-0.58.18.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-doc-1.0.1g-0.58.18.1.s390x as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.s390x"
        },
        "product_reference": "openssl1-doc-1.0.1g-0.58.18.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl1-doc-1.0.1g-0.58.18.1.x86_64 as component of SUSE Linux Enterprise Server 11-SECURITY",
          "product_id": "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.x86_64"
        },
        "product_reference": "openssl1-doc-1.0.1g-0.58.18.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11-SECURITY"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.x86_64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.i586",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ia64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ppc64",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.s390x",
          "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1-devel-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:libopenssl1_0_0-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-1.0.1g-0.58.18.1.x86_64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.i586",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ia64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.ppc64",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.s390x",
            "SUSE Linux Enterprise Server 11-SECURITY:openssl1-doc-1.0.1g-0.58.18.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:28:44Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for openssl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Reject invalid EC point coordinates (bsc#1131291)\n- Mitigate the \u0027The 9 Lives of Bleichenbacher\u0027s CAT: Cache ATtacks on TLS Implementations\u0027 attack (bsc#1117951)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleposp3-openssl-14092,slessp4-openssl-14092",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_14092-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:14092-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-201914092-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:14092-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005582.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131291",
        "url": "https://bugzilla.suse.com/1131291"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl",
    "tracking": {
      "current_release_date": "2019-09-11T14:45:26Z",
      "generator": {
        "date": "2019-09-11T14:45:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:14092-1",
      "initial_release_date": "2019-09-11T14:45:26Z",
      "revision_history": [
        {
          "date": "2019-09-11T14:45:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-0.9.8j-0.106.21.1.i586",
                "product": {
                  "name": "libopenssl-devel-0.9.8j-0.106.21.1.i586",
                  "product_id": "libopenssl-devel-0.9.8j-0.106.21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
                "product": {
                  "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
                  "product_id": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
                "product": {
                  "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
                  "product_id": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0.9.8j-0.106.21.1.i586",
                "product": {
                  "name": "openssl-0.9.8j-0.106.21.1.i586",
                  "product_id": "openssl-0.9.8j-0.106.21.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-doc-0.9.8j-0.106.21.1.i586",
                "product": {
                  "name": "openssl-doc-0.9.8j-0.106.21.1.i586",
                  "product_id": "openssl-doc-0.9.8j-0.106.21.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "openssl-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "openssl-0.9.8j-0.106.21.1.ppc64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-doc-0.9.8j-0.106.21.1.ppc64",
                "product": {
                  "name": "openssl-doc-0.9.8j-0.106.21.1.ppc64",
                  "product_id": "openssl-doc-0.9.8j-0.106.21.1.ppc64"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
                  "product_id": "libopenssl0_9_8-0.9.8j-0.106.21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
                  "product_id": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
                  "product_id": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
                  "product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "openssl-0.9.8j-0.106.21.1.s390x",
                  "product_id": "openssl-0.9.8j-0.106.21.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-doc-0.9.8j-0.106.21.1.s390x",
                "product": {
                  "name": "openssl-doc-0.9.8j-0.106.21.1.s390x",
                  "product_id": "openssl-doc-0.9.8j-0.106.21.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "openssl-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "openssl-0.9.8j-0.106.21.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-doc-0.9.8j-0.106.21.1.x86_64",
                "product": {
                  "name": "openssl-doc-0.9.8j-0.106.21.1.x86_64",
                  "product_id": "openssl-doc-0.9.8j-0.106.21.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-pos:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP4-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles:11:sp4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl-devel-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "libopenssl-devel-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "openssl-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "openssl-doc-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "openssl-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "openssl-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "openssl-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "openssl-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-0.9.8j-0.106.21.1.i586 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.i586"
        },
        "product_reference": "openssl-doc-0.9.8j-0.106.21.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-0.9.8j-0.106.21.1.ppc64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.ppc64"
        },
        "product_reference": "openssl-doc-0.9.8j-0.106.21.1.ppc64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-0.9.8j-0.106.21.1.s390x as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.s390x"
        },
        "product_reference": "openssl-doc-0.9.8j-0.106.21.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-0.9.8j-0.106.21.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.x86_64"
        },
        "product_reference": "openssl-doc-0.9.8j-0.106.21.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.i586",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.ppc64",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.s390x",
          "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl-devel-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:openssl-doc-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-32bit-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:libopenssl0_9_8-hmac-32bit-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-0.9.8j-0.106.21.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.i586",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.ppc64",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.s390x",
            "SUSE Linux Enterprise Server 11 SP4-LTSS:openssl-doc-0.9.8j-0.106.21.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-09-11T14:45:26Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for openssl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\n  \nThis update for openssl fixes the following issues:\n\n- CVE-2018-0732: Reject excessively large primes in DH key generation (bsc#1097158)\n- CVE-2018-0734: Timing vulnerability in DSA signature generation (bsc#1113652)\n- CVE-2018-0737: Cache timing vulnerability in RSA Key Generation (bsc#1089039)\n- CVE-2018-5407: Elliptic curve scalar multiplication timing attack defenses (fixes \u0027PortSmash\u0027) (bsc#1113534)\n- CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080)\n- Fix One\u0026Done side-channel attack on RSA (bsc#1104789)\n- Reject invalid EC point coordinates (bsc#1131291)\n- The 9 Lives of Bleichenbacher\u0027s CAT: Cache ATtacks on TLS Implementations (bsc#1117951)\n- Add missing error string to CVE-2016-8610 fix (bsc#1110018#c9)\n- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)\n\nNon security fixes:\n\n- correct the error detection in the fips patch (bsc#1106197)\n- Add openssl(cli) Provide so the packages that require the openssl\n  binary can require this instead of the new openssl meta package\n  (bsc#1101470)\n\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2019-1553,SUSE-SLE-SERVER-12-2019-1553",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2019_1553-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2019:1553-1",
        "url": "https://www.suse.com/support/update/announcement/2019/suse-su-20191553-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2019:1553-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2019-June/005586.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1089039",
        "url": "https://bugzilla.suse.com/1089039"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1097158",
        "url": "https://bugzilla.suse.com/1097158"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1097624",
        "url": "https://bugzilla.suse.com/1097624"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1098592",
        "url": "https://bugzilla.suse.com/1098592"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1101470",
        "url": "https://bugzilla.suse.com/1101470"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1104789",
        "url": "https://bugzilla.suse.com/1104789"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1106197",
        "url": "https://bugzilla.suse.com/1106197"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1110018",
        "url": "https://bugzilla.suse.com/1110018"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113534",
        "url": "https://bugzilla.suse.com/1113534"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1113652",
        "url": "https://bugzilla.suse.com/1113652"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1117951",
        "url": "https://bugzilla.suse.com/1117951"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1127080",
        "url": "https://bugzilla.suse.com/1127080"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1131291",
        "url": "https://bugzilla.suse.com/1131291"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-8610 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-8610/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-0732 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-0732/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-0734 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-0734/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-0737 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-0737/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2018-5407 page",
        "url": "https://www.suse.com/security/cve/CVE-2018-5407/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-1559 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-1559/"
      }
    ],
    "title": "Security update for openssl",
    "tracking": {
      "current_release_date": "2019-06-18T16:29:26Z",
      "generator": {
        "date": "2019-06-18T16:29:26Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2019:1553-1",
      "initial_release_date": "2019-06-18T16:29:26Z",
      "revision_history": [
        {
          "date": "2019-06-18T16:29:26Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.aarch64",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.aarch64",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.aarch64",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.aarch64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.aarch64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.aarch64",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.aarch64",
                  "product_id": "openssl-1.0.1i-27.34.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl-devel-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                  "product_id": "libopenssl-devel-64bit-1.0.1i-27.34.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-64bit-1.0.1i-27.34.1.aarch64_ilp32"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                "product": {
                  "name": "libopenssl1_0_0-hmac-64bit-1.0.1i-27.34.1.aarch64_ilp32",
                  "product_id": "libopenssl1_0_0-hmac-64bit-1.0.1i-27.34.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.i586",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.i586",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.i586",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.i586",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.i586",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.i586",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.i586",
                  "product_id": "openssl-1.0.1i-27.34.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "openssl-doc-1.0.1i-27.34.1.noarch",
                "product": {
                  "name": "openssl-doc-1.0.1i-27.34.1.noarch",
                  "product_id": "openssl-doc-1.0.1i-27.34.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.ppc64le",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.ppc64le",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.ppc64le",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.ppc64le",
                  "product_id": "openssl-1.0.1i-27.34.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.s390",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.s390",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.s390",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.s390",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.s390",
                  "product_id": "openssl-1.0.1i-27.34.1.s390"
                }
              }
            ],
            "category": "architecture",
            "name": "s390"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl-devel-32bit-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.s390x",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.s390x",
                  "product_id": "openssl-1.0.1i-27.34.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libopenssl-devel-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl-devel-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl-devel-32bit-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl-devel-32bit-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl-devel-32bit-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl1_0_0-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
                  "product_id": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "openssl-1.0.1i-27.34.1.x86_64",
                "product": {
                  "name": "openssl-1.0.1i-27.34.1.x86_64",
                  "product_id": "openssl-1.0.1i-27.34.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 12-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-27.34.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-27.34.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-27.34.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-1.0.1i-27.34.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64"
        },
        "product_reference": "libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-27.34.1.ppc64le as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le"
        },
        "product_reference": "openssl-1.0.1i-27.34.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-27.34.1.s390x as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x"
        },
        "product_reference": "openssl-1.0.1i-27.34.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-1.0.1i-27.34.1.x86_64 as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64"
        },
        "product_reference": "openssl-1.0.1i-27.34.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "openssl-doc-1.0.1i-27.34.1.noarch as component of SUSE Linux Enterprise Server 12-LTSS",
          "product_id": "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        },
        "product_reference": "openssl-doc-1.0.1i-27.34.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-8610",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-8610"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-8610",
          "url": "https://www.suse.com/security/cve/CVE-2016-8610"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005878 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1005878"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1005879 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1005879"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110018 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1110018"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1120592 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1120592"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126909 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1126909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/1148697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 982575 for CVE-2016-8610",
          "url": "https://bugzilla.suse.com/982575"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-8610"
    },
    {
      "cve": "CVE-2018-0732",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-0732"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2-1.0.2o).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-0732",
          "url": "https://www.suse.com/security/cve/CVE-2018-0732"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1077628 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1077628"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1097158 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1097158"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1099502 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1099502"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1106692 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1106692"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108542 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1108542"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1110163 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1110163"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1112097 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1112097"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122198 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1122198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2018-0732",
          "url": "https://bugzilla.suse.com/1148697"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "important"
        }
      ],
      "title": "CVE-2018-0732"
    },
    {
      "cve": "CVE-2018-0734",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-0734"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-0734",
          "url": "https://www.suse.com/security/cve/CVE-2018-0734"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1113534 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1113534"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1113652 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1113652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1113742 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1113742"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122198 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1122198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1122212 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1122212"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126909 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1126909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2018-0734",
          "url": "https://bugzilla.suse.com/1148697"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-0734"
    },
    {
      "cve": "CVE-2018-0737",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-0737"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The OpenSSL RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could recover the private key. Fixed in OpenSSL 1.1.0i-dev (Affected 1.1.0-1.1.0h). Fixed in OpenSSL 1.0.2p-dev (Affected 1.0.2b-1.0.2o).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-0737",
          "url": "https://www.suse.com/security/cve/CVE-2018-0737"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089039 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1089039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089041 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1089041"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089044 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1089044"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1089045 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1089045"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108542 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1108542"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123780 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1123780"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126909 for CVE-2018-0737",
          "url": "https://bugzilla.suse.com/1126909"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-0737"
    },
    {
      "cve": "CVE-2018-5407",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2018-5407"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on \u0027port contention\u0027.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2018-5407",
          "url": "https://www.suse.com/security/cve/CVE-2018-5407"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1113534 for CVE-2018-5407",
          "url": "https://bugzilla.suse.com/1113534"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1116195 for CVE-2018-5407",
          "url": "https://bugzilla.suse.com/1116195"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1126909 for CVE-2018-5407",
          "url": "https://bugzilla.suse.com/1126909"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1148697 for CVE-2018-5407",
          "url": "https://bugzilla.suse.com/1148697"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2018-5407"
    },
    {
      "cve": "CVE-2019-1559",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-1559"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
          "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-1559",
          "url": "https://www.suse.com/security/cve/CVE-2019-1559"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1127080 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1127080"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1130039 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1130039"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1141798 for CVE-2019-1559",
          "url": "https://bugzilla.suse.com/1141798"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:libopenssl1_0_0-hmac-32bit-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.ppc64le",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.s390x",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-1.0.1i-27.34.1.x86_64",
            "SUSE Linux Enterprise Server 12-LTSS:openssl-doc-1.0.1i-27.34.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2019-06-18T16:29:26Z",
          "details": "low"
        }
      ],
      "title": "CVE-2019-1559"
    }
  ]
}