Input validation error in OpenSSL - CVE-2021-23840

Vulnerability identifier: #VU50745

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-23840

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input during EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate calls. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

OpenSSL
Arch Linux
Amazon Linux AMI
Gentoo Linux
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE CaaS Platform
SUSE Manager Proxy
SUSE MicroOS
SUSE Enterprise Storage
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Fedora
CentOS
SUSE OpenStack Cloud
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
IBM AIX
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
HPE Helion Openstack
SUSE OpenStack Cloud Crowbar
FreeBSD
SUSE Linux Enterprise Server
SUSE Linux Enterprise Point of Sale
SUSE Linux Enterprise Debuginfo
SUSE Linux Enterprise Module for Legacy Software
SUSE Linux Enterprise Module for Web Scripting
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
Ubuntu
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
Junos OS
openEuler
IBM Security Verify Bridge
MELSOFT GT OPC UA Client
IBM Netcool Agile Service Manager
IBM Cloud Transformation Advisor
Red Hat Advanced Cluster Management for Kubernetes
EasyApache
IBM Rational Build Forge
InfoSphere Master Data Management
IBM MaaS360 Cloud Extender Agent
Red Hat Advanced Cluster Security for Kubernetes
IBM Aspera Orchestrator
IBM Cloud Automation Manager
IBM Safer Payments
Engineering Workflow Management
NetWorker
PowerProtect Data Manager
IBM Security Verify Gateway
Fujitsu M10-1
Fujitsu M10-4S
Fujitsu M10-4
APM Edge
Telemetry Dashboard
Liquidware
Citrix Workspace App
Webex App VDI
HP-UX OpenSSL
IBM Aspera Shares
IBM MaaS360 Ceriticate Integration Module
IBM MaaS360 Base Module
IBM Aspera Console
XtremIO X2
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch
GT SoftGOT2000
SINEC INS
SDM600
Dell EMC Storage Monitoring and Reporting (SMR)
Fujitsu M12-2S
Fujitsu M12-2
Fujitsu M12-1
LANTIME Operating System Firmware (LTOS)
jbcs-httpd24-openssl-pkcs11 (Red Hat package)
jbcs-httpd24-openssl-chil (Red Hat package)
openssl (Red Hat package)
openssl (Debian package)
jbcs-httpd24-apr-util (Red Hat package)
jbcs-httpd24-apr (Red Hat package)
jbcs-httpd24-mod_http2 (Red Hat package)
jbcs-httpd24-nghttp2 (Red Hat package)
jbcs-httpd24-mod_md (Red Hat package)
jbcs-httpd24-httpd (Red Hat package)
jbcs-httpd24-mod_security (Red Hat package)
jbcs-httpd24-curl (Red Hat package)
openssl (Ubuntu package)
libssl1.0.0 (Ubuntu package)
libopenssl-devel
openssl-debugsource
openssl-debuginfo
libopenssl0_9_8-hmac-32bit
libopenssl0_9_8-32bit
openssl-doc
libopenssl0_9_8
openssl
libopenssl0_9_8-hmac
libopenssl0_9_8-debuginfo-32bit
libopenssl0_9_8-debuginfo
compat-openssl098-debugsource
ovmf (Ubuntu package)
qemu-efi-aarch64 (Ubuntu package)
qemu-efi-arm (Ubuntu package)
qemu-efi (Ubuntu package)
libopenssl1_0_0
openssl1-debugsource
openssl1-debuginfo
libopenssl1_0_0-x86
libopenssl1_0_0-32bit
openssl1-doc
openssl1
libopenssl1-devel
libopenssl1_0_0-hmac-32bit
libopenssl1_0_0-hmac
libopenssl1_0_0-debuginfo-32bit
libopenssl1_0_0-debuginfo
openssl-1_0_0-debuginfo
openssl-1_0_0-debugsource
openssl-1_0_0-doc
openssl-1_0_0
libopenssl-1_0_0-devel
libopenssl10-debuginfo
libopenssl10
libopenssl1_1-hmac
libopenssl-1_1-devel
libopenssl1_1
libopenssl1_1-debuginfo
openssl-1_1
openssl-1_1-debuginfo
openssl-1_1-debugsource
libopenssl1_1-32bit
libopenssl1_1-32bit-debuginfo
libopenssl1_1-hmac-32bit
libopenssl-1_1-devel-32bit
libopenssl1_1-debuginfo-32bit
openssl-libs
openssl-help
openssl-devel
openssl11
libssl1.1 (Ubuntu package)
npm10
nodejs10-docs
nodejs10
nodejs10-debuginfo
nodejs10-debugsource
nodejs10-devel
nodejs12-debugsource
nodejs12-devel
nodejs12-debuginfo
nodejs12
npm12
nodejs12-docs
shim
shim-debugsource
shim-debuginfo
ovmf-ia32 (Ubuntu package)
edk2 (Red Hat package)
IBM Integrated Analytics System
IBM Aspera Faspex for Linux
IBM Aspera Faspex for Windows
Cloud Pak for Security (CP4S)
Nessus Agent
IBM Cloud Pak System
JBoss Core Services
IBM VIOS
Nessus Network Monitor
IBM DataPower Gateway
VMware Horizon Client
Node.js
IBM Security Guardium
IBM InfoSphere Information Server
Cisco Jabber
Cisco Webex Meetings
Orion Platform
Juniper Junos Space
Contrail Networking
IBM MaaS360 VPN Module
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)
Engineering Lifecycle Management
Dell EMC VxRail Appliance
IBM Flex System CN4093 10Gb Converged Scalable Switch
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch
IBM Flex System EN2092 1Gb Ethernet Scalable Switch
IBM Cognos Analytics

Install updates from vendor's website.

OpenSSL - addressed in versions 1.0.2y, 1.1.1j
GT SoftGOT2000 - update to 1.275M
MELSOFT GT OPC UA Client - update to 1.03D
jbcs-httpd24-openssl-pkcs11 (Red Hat package) - addressed in versions 0.4.10-22.el8jbcs, 0.4.10-22.jbcs.el7
APM Edge - update to 4.0
jbcs-httpd24-openssl-chil (Red Hat package) - addressed in versions 1.0.0-7.el8jbcs, 1.0.0-7.jbcs.el7
Telemetry Dashboard - update to 1.1.0.6 on Thin OS 2405
openssl (Red Hat package) - addressed in versions 1.0.2k-22.el7_9, 1.1.1k-4.el8
openssl (Debian package) - update to 1.1.1d-0+deb10u5
IBM Netcool Agile Service Manager - update to 1.1.13
jbcs-httpd24-apr-util (Red Hat package) - addressed in versions 1.6.1-84.el8jbcs, 1.6.1-84.jbcs.el7
jbcs-httpd24-apr (Red Hat package) - addressed in versions 1.6.3-107.el8jbcs, 1.6.3-107.jbcs.el7
Cloud Pak for Security (CP4S) - update to 1.10.7.0
jbcs-httpd24-mod_http2 (Red Hat package) - addressed in versions 1.15.7-21.el8jbcs, 1.15.7-21.jbcs.el7
jbcs-httpd24-nghttp2 (Red Hat package) - addressed in versions 1.39.2-39.el8jbcs, 1.39.2-39.jbcs.el7
jbcs-httpd24-mod_md (Red Hat package) - addressed in versions 2.0.8-40.el8jbcs, 2.0.8-40.jbcs.el7
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.1.12, 2.2.2, 2.2.10, 2.3.3
IBM Cloud Pak System - update to 2.3.3.5
JBoss Core Services - update to 2.4.37 SP10
jbcs-httpd24-httpd (Red Hat package) - addressed in versions 2.4.37-78.el8jbcs, 2.4.37-78.jbcs.el7
jbcs-httpd24-mod_security (Red Hat package) - addressed in versions 2.9.2-67.GA.el8jbcs, 2.9.2-67.GA.jbcs.el7
EasyApache - update to 4 2021-2-24
Nessus Network Monitor - update to 5.13.1
Liquidware - update to 6.7.0.2.2 on Thin OS 2405
LANTIME Operating System Firmware (LTOS) - addressed in versions 6.24.028, 7.02.003
Nessus Agent - update to 8.2.3
jbcs-httpd24-curl (Red Hat package) - addressed in versions 7.78.0-2.el8jbcs, 7.78.0-2.jbcs.el7
IBM Rational Build Forge - update to 8.0.0.24
Node.js - addressed in versions 10.24.0, 12.21.0, 14.16.0, 15.10.0
Cisco Jabber - update to 14.3.0.308378.11 on Thin OS 2405
Junos OS - addressed in versions 18.4R2-S10, 19.2R1-S9, 19.2R3-S5, 19.3R3-S5, 19.4R3-S7, 20.1R3-S3, 20.2R3-S4, 20.3R3-S2, 20.4R3-S1, 21.1R3-S1, 21.2R2-S1, 21.2R3, 21.3R2, 21.4R1
Citrix Workspace App - update to 24.2.0.65.17 on Thin OS 2405
Webex App VDI - update to 44.2.0.28744.1 on Thin OS 2405
Cisco Webex Meetings - update to 44.2.0.76.2 on Thin OS 2405
Orion Platform - update to 2024.2
IBM DataPower Gateway - update to 2018.4.1.17
VMware Horizon Client - update to 2312.1.8.12.1.5 on Thin OS 2405
openssl (Ubuntu package) - update to Ubuntu Pro
libssl1.0.0 (Ubuntu package) - addressed in versions Ubuntu Pro, 1.0.2g-1ubuntu4.19, 1.0.2n-1ubuntu5.6
HP-UX OpenSSL - update to A.01.01.01l.001
Contrail Networking - update to R22.3
libopenssl-devel - addressed in versions 0.9.8j-0.106.37.1, 1.0.2j-60.66.1
openssl-debugsource - addressed in versions 0.9.8j-0.106.37.1, 1.0.2j-60.66.1
openssl-debuginfo - addressed in versions 0.9.8j-0.106.37.1, 1.0.2j-60.66.1
libopenssl0_9_8-hmac-32bit - update to 0.9.8j-0.106.37.1
libopenssl0_9_8-32bit - addressed in versions 0.9.8j-0.106.37.1, 0.9.8j-106.24.1
openssl-doc - addressed in versions 0.9.8j-0.106.37.1, 1.0.2j-60.66.1
libopenssl0_9_8 - addressed in versions 0.9.8j-0.106.37.1, 0.9.8j-106.24.1
openssl - addressed in versions 0.9.8j-0.106.37.1, 1.0.2j-60.66.1
libopenssl0_9_8-hmac - update to 0.9.8j-0.106.37.1
libopenssl0_9_8-debuginfo-32bit - update to 0.9.8j-106.24.1
libopenssl0_9_8-debuginfo - update to 0.9.8j-106.24.1
compat-openssl098-debugsource - update to 0.9.8j-106.24.1
ovmf (Ubuntu package) - addressed in versions 0~20191122.bd85bf54-2ubuntu3.3, 2020.11-4ubuntu0.1
qemu-efi-aarch64 (Ubuntu package) - addressed in versions 0~20191122.bd85bf54-2ubuntu3.3, 2020.11-4ubuntu0.1
qemu-efi-arm (Ubuntu package) - addressed in versions 0~20191122.bd85bf54-2ubuntu3.3, 2020.11-4ubuntu0.1
qemu-efi (Ubuntu package) - addressed in versions 0~20191122.bd85bf54-2ubuntu3.3, 2020.11-4ubuntu0.1
libopenssl1_0_0 - addressed in versions 1.0.1g-0.58.33.1, 1.0.2j-60.66.1, 1.0.2p-3.36.1, 1.0.2p-3.37.1
openssl1-debugsource - update to 1.0.1g-0.58.33.1
openssl1-debuginfo - update to 1.0.1g-0.58.33.1
libopenssl1_0_0-x86 - update to 1.0.1g-0.58.33.1
libopenssl1_0_0-32bit - addressed in versions 1.0.1g-0.58.33.1, 1.0.2j-60.66.1, 1.0.2p-3.36.1
openssl1-doc - update to 1.0.1g-0.58.33.1
openssl1 - update to 1.0.1g-0.58.33.1
libopenssl1-devel - update to 1.0.1g-0.58.33.1
SINEC INS - update to 1.0.1.1
libopenssl1_0_0-hmac-32bit - addressed in versions 1.0.2j-60.66.1, 1.0.2p-3.36.1
libopenssl1_0_0-hmac - addressed in versions 1.0.2j-60.66.1, 1.0.2p-3.36.1
libopenssl1_0_0-debuginfo-32bit - addressed in versions 1.0.2j-60.66.1, 1.0.2p-3.36.1
libopenssl1_0_0-debuginfo - addressed in versions 1.0.2j-60.66.1, 1.0.2p-3.36.1, 1.0.2p-3.37.1
openssl-1_0_0-debuginfo - addressed in versions 1.0.2p-3.36.1, 1.0.2p-3.37.1
openssl-1_0_0-debugsource - addressed in versions 1.0.2p-3.36.1, 1.0.2p-3.37.1
openssl-1_0_0-doc - update to 1.0.2p-3.36.1
openssl-1_0_0 - addressed in versions 1.0.2p-3.36.1, 1.0.2p-3.37.1
libopenssl-1_0_0-devel - addressed in versions 1.0.2p-3.36.1, 1.0.2p-3.37.1
libopenssl10-debuginfo - update to 1.0.2p-3.37.1
libopenssl10 - update to 1.0.2p-3.37.1
libopenssl1_1-hmac - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-11.17.1
libopenssl-1_1-devel - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
libopenssl1_1 - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
libopenssl1_1-debuginfo - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
openssl-1_1 - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
openssl-1_1-debuginfo - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
openssl-1_1-debugsource - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
libopenssl1_1-32bit - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-2.30.1, 1.1.1d-11.17.1
libopenssl1_1-32bit-debuginfo - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-11.17.1
libopenssl1_1-hmac-32bit - addressed in versions 1.1.0i-4.57.1, 1.1.0i-14.15.1, 1.1.1d-11.17.1
libopenssl-1_1-devel-32bit - addressed in versions 1.1.0i-14.15.1, 1.1.1d-2.30.1
libopenssl1_1-debuginfo-32bit - update to 1.1.1d-2.30.1
openssl-debugsource - update to 1.1.1f-4
openssl-libs - update to 1.1.1f-4
openssl - update to 1.1.1f-4
openssl-help - update to 1.1.1f-4
openssl-debuginfo - update to 1.1.1f-4
openssl-devel - update to 1.1.1f-4
openssl11 - update to 1.1.1k-1.el7
libssl1.1 (Ubuntu package) - addressed in versions 1.1.1f-1ubuntu2.2, 1.1.1f-1ubuntu4.2, 1.1.1-1ubuntu2.1~18.04.8
SDM600 - update to 1.2 FP2 HF10
IBM Aspera Shares - update to 1.9.15
IBM MaaS360 VPN Module - update to 2.105.300.005
IBM MaaS360 Ceriticate Integration Module - update to 2.105.300.005
IBM MaaS360 Cloud Extender Agent - update to 2.105.300.005
IBM MaaS360 Base Module - update to 2.105.300.005
IBM Aspera Console - update to 3.4.2
Red Hat Advanced Cluster Security for Kubernetes - update to 3.67
IBM Aspera Orchestrator - update to 4.0.1.2b9681
IBM Cloud Automation Manager - update to 4.2.0.1 iFix 3
IBM Aspera Faspex for Linux - update to 4.4.2
IBM Aspera Faspex for Windows - update to 4.4.2
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.6.0.0
Dell EMC Unity XT Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity VSA Operating Environment (OE) - update to 5.1.2.0.5.007
Dell EMC Unity Operating Environment (OE) - update to 5.1.2.0.5.007
IBM Safer Payments - addressed in versions 5.7.0.13, 6.0.0.10, 6.1.0.08, 6.2.1.03
XtremIO X2 - update to 6.4.2-13
Engineering Workflow Management - addressed in versions 7.0.1 iFix022, 7.0.2 iFix023
Engineering Lifecycle Management - addressed in versions 7.0.1 iFix022, 7.0.2 iFix023
Dell EMC VxRail Appliance - update to 7.0.240
IBM Flex System CN4093 10Gb Converged Scalable Switch - update to 7.8.31.0
Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch - update to 7.8.31.0
IBM Flex System Fabric SI4093 GbFSIM 10Gb Scalable Switch - update to 7.8.31.0
IBM Flex System EN2092 1Gb Ethernet Scalable Switch - update to 7.8.31.0
npm10 - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
nodejs10-docs - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
nodejs10 - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
nodejs10-debuginfo - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
nodejs10-debugsource - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
nodejs10-devel - addressed in versions 10.24.0-1.33.2, 10.24.0-1.36.2
IBM Cognos Analytics - addressed in versions 11.1.7 Fix Pack 8, 11.2.4 FP3, 12.0.2
nodejs12-debugsource - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
nodejs12-devel - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
nodejs12-debuginfo - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
nodejs12 - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
npm12 - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
nodejs12-docs - addressed in versions 12.21.0-1.29.2, 12.21.0-4.13.2
shim - update to 15-23
shim-debugsource - update to 15-23
shim-debuginfo - update to 15-23
NetWorker - update to 19.10.0.0
PowerProtect Data Manager - update to 19.19.0-15
Juniper Junos Space - update to 22.1R1
ovmf-ia32 (Ubuntu package) - update to 2020.11-4ubuntu0.1
edk2 (Red Hat package) - update to 20210527gite1999b264f1f-3.el8

• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1
• https://git.openssl.org/gitweb/?p=openssl.git;a=commitdiff;h=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2
• https://www.openssl.org/news/secadv/20210216.txt

• Multiple vulnerabilities in OpenSSL
• Debian update for openssl
• Amazon Linux AMI update for openssl
• EasyApache update for OpenSSL
• Multiple vulnerabilities in Node.js
• Arch Linux update for openssl
• Multiple vulnerabilities in Tenable Nessus Agent
• Gentoo update for OpenSSL
• IBM AIX update for OpenSSL
• IBM VIOS update for OpenSSL
• Multiple vulnerabilities in Nessus Network Monitor
• FreeBSd update for OpenSSL
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Red Hat Enterprise Linux 7 update for openssl
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat JBoss Core Services Apache HTTP Server
• Red Hat Enterprise Linux 8 update for openssl
• CentOS 7 update for openssl
• Multiple vulnerabilities in Hitachi Energy APM Edge
• Multiple vulnerabilities in Dell EMC Unity
• Multiple vulnerabilities in Fujitsu M12-2S
• Multiple vulnerabilities in Fujitsu M12-2
• Multiple vulnerabilities in Fujitsu M12-1
• Multiple vulnerabilities in Fujitsu M10-4S
• Multiple vulnerabilities in Fujitsu M10-4
• Multiple vulnerabilities in Fujitsu M10-1
• Multiple vulnerabilities in IBM Integrated Analytics System
• Multiple vulnerabilities in Siemens SINEC INS
• IBM Security Guardium update for OpenSSL
• Multiple vulnerabilities in Hitachi Energy SDM600
• Multiple vulnerabilities in Mitsubishi Electric MELSOFT GT OPC UA and GT SoftGOT2000
• Multiple Vulnerabilities in IBM Netcool Agile Service Manager
• SUSE update for nodejs12
• SUSE update for nodejs12
• Ubuntu update for openssl
• Junos OS update for OpenSSL
• Multiple vulnerabilities in Junos Space
• Multiple vulnerabilities in IBM InfoSphere Master Data Management
• Multiple vulnerabilities in IBM Cloud Pak System third-party components
• Multiple vulnerabilities in IBM Aspera Console and Aspera Shares
• Denial of service in IBM DataPower Gateway
• Multiple vulnerabilities in IBM InfoSphere Information Server
• Multiple vulnerabilities in IBM Security Verify products
• Multiple vulnerabilities in IBM MaaS360 Cloud Extender and Modules
• Multiple vulnerabilities in IBM Security Verify Bridge
• Multiple vulnerabilities in IBM Aspera Faspex
• Multiple vulnerabilities in Juniper Networks Contrail Networking
• Multiple vulnerabilities in Dell Storage Monitoring and Reporting (SMR)
• Red Hat Enterprise Linux 8 update for edk2
• Multiple vulnerabilities in IBM Aspera Orchestrator
• SUSE update for nodejs10
• SUSE update for nodejs10
• SUSE update for openssl-1_0_0
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• SUSE update for openssl-1_1
• SUSE update for openssl-1_0_0
• SUSE update for compat-openssl098
• SUSE update for openssl1
• SUSE update for openssl
• SUSE update for openssl
• Ubuntu update for edk2
• Multiple vulnerabilities in HPE HP-UX Using OpenSSL
• Multiple vulnerabilities in IBM Safer Payments
• Multiple vulnerabilities in IBM Cloud Automation Manager
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Engineering Workflow Management (EWM)
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in IBM Rational Build Forge
• Multiple vulnerabilities in Dell Networker
• Multiple vulnerabilities in IBM Cognos Analytics
• openEuler update for shim
• openEuler update for openssl
• SolarWinds Platform update for third-party components
• Multiple vulnerabilities in Dell ThinOS
• Ubuntu update for openssl
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes 3.67
• Fedora EPEL 7 update for openssl11
• Multiple vulnerabilities in Dell XtremIO X2
• Multiple vulnerabilities in Dell PowerProtect Data Manager
• Multiple vulnerabilities in Meinberg LANTIME firmware
• Multiple vulnerabilities in IBM Flex System switch firmware products
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Management for Kubernetes 2.2