CVE catalog
CVE-2025-9230
OpenSSL vulnerabilities
- Severity
- High · CVSS 7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.55% · Oct 25, 2026
Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a memory corruption which can have various consequences including a Denial of Service or Execution of attacker-supplied code. Although the consequences of a successful exploit of this vulnerability could be severe, the probability that the attacker would be able to perform it is low. Besides, password based (PWRI) encryption support in CMS messages is very rarely used. For that reason the issue was assessed as Moderate severity according to our Security Policy. The FIPS modules in 3.5, 3.4, 3.3, 3.2, 3.1 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | openssl | sid | 3.6.5-1 | fixed |
| Debian | openssl | forky | 3.6.5-1 | fixed |
| Debian | openssl | trixie | 3.5.7-1~deb13u2 | fixed |
| Debian | openssl | trixie-security | 3.5.7-1~deb13u3 | fixed |
| Debian | openssl | bookworm | 3.0.20-1~deb12u2 | fixed |
| Debian | openssl | bookworm-security | 3.0.22-1~deb12u2 | fixed |
| Ubuntu | openssl | noble | 3.0.17-1~deb12u3 | fixed |
| Ubuntu | openssl | noble | 3.0.13-0ubuntu3.6 | fixed |
| Ubuntu | libssl-dev | noble | 3.0.13-0ubuntu3.6 | fixed |
| Ubuntu | libssl-doc | noble | 3.0.13-0ubuntu3.6 | fixed |
| Ubuntu | libssl3t64 | noble | 3.0.13-0ubuntu3.6 | fixed |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.10+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.12+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.14+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.15+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.16+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.17+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.18+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.19+Fips1 | vulnerable |
| Ubuntu | openssl | pro | 3.0.2-0ubuntu1.20+Fips1 | fixed |
| Ubuntu | nodejs | pro | 12.22.5~dfsg-5ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.7~dfsg-2ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.1 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.2 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.3 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.4 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.5 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6 | vulnerable |
| Ubuntu | nodejs | pro | 12.22.9~dfsg-1ubuntu3.6+esm2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.6 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.7 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.8 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.9 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.10 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.11 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.12 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm2 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.19 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.20 | fixed |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3+Fips1 | vulnerable |
| Ubuntu | openssl-fips | pro | 3.0.13-0ubuntu3.6+Fips1 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.5 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.6 | fixed |
| Ubuntu | openssl | 25.10 | 3.4.1-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.0-2ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.2-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 25.10 | 3.5.3-1ubuntu2 | fixed |
| Ubuntu | openssl | 26.04 | 3.5.3-1ubuntu2 | fixed |
| Alpine | openssl | 3.17 | 3.0.19-r0 | fixed |
| Alpine | openssl | 3.19 | 3.1.8-r1 | fixed |
| Alpine | openssl | 3.20 | 3.3.5-r0 | fixed |
| Alpine | openssl | 3.21 | 3.3.5-r0 | fixed |
| Alpine | openssl | 3.22 | 3.5.4-r0 | fixed |
| Alpine | openssl | 3.23 | 3.5.4-r0 | fixed |
| Alpine | openssl | 3.24 | 3.5.4-r0 | fixed |
| Ubuntu | openssl | pro | 1.1.1c-1ubuntu4 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1d-2ubuntu3 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1d-2ubuntu6 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu1 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.2 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.3 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.4 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.5 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.8 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.9 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.10 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.11 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.12 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.13 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.15 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.16 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.17 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.18 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.19 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.20 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.21 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.22 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.23 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.24 | vulnerable |
| Ubuntu | openssl | pro | 1.1.1f-1ubuntu2.24+esm1 | fixed |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.2 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.3 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.4 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.5 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.6 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.7 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.8 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.9 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.10 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.11 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.12 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm1 | vulnerable |
| Ubuntu | openssl1.0 | pro | 1.0.2n-1ubuntu5.13+esm2 | fixed |
| Ubuntu | openssl | 22.04 | 1.1.1l-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.0-1ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.1-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.1 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.2 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.4 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.5 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.6 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.7 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.8 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.9 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.10 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.12 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.13 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.14 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.15 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.16 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.17 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.18 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.19 | vulnerable |
| Ubuntu | openssl | 22.04 | 3.0.2-0ubuntu1.20 | fixed |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu2.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.10-1ubuntu4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.1 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.2 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.3 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.4 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.5 | vulnerable |
| Ubuntu | openssl | 24.04 | 3.0.13-0ubuntu3.6 | fixed |
| Opensuse | openssl-3 | leap 16.0 | 3.5.0-160000.4.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp6 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise module for legacy 15 sp7 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp4-espos | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise high performance computing 15 sp4-ltss | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp4-ltss | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 15 sp5-ltss | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp4 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server for sap applications 15 sp5 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-1_0_0 | enterprise storage 7.1 | 1.0.2p-150000.3.97.1 | fixed |
| Opensuse | openssl-1_0_0 | leap 15.6 | 1.0.2p-150000.3.97.1 | fixed |
| Suse | openssl-3 | linux micro 6.2 | 3.5.0-160000.4.1 | fixed |
| Suse | openssl-3 | linux enterprise server 16.0 | 3.5.0-160000.4.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 16.0 | 3.5.0-160000.4.1 | fixed |
| Suse | openssl-3 | linux micro 6.0 | 3.1.4-10.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for basesystem 15 sp6 | 1.1.1w-150600.5.18.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for development tools 15 sp6 | 1.1.1w-150600.5.18.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for legacy 15 sp6 | 1.1.1w-150600.5.18.1 | fixed |
| Opensuse | openssl-1_1 | leap 15.6 | 1.1.1w-150600.5.18.1 | fixed |
| Suse | openssl-3 | linux enterprise module for basesystem 15 sp6 | 3.1.4-150600.5.39.1 | fixed |
| Opensuse | openssl-3 | leap 15.6 | 3.1.4-150600.5.39.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.1 | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.2 | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-1_1 | enterprise storage 7.1 | 1.1.1d-150200.11.103.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.3 | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | linux enterprise micro 5.4 | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | manager proxy lts 4.3 | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-3 | manager server lts 4.3 | 3.0.8-150400.4.75.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.5 | 1.1.1l-150500.17.43.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp5-espos | 1.1.1l-150500.17.43.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp5-ltss | 1.1.1l-150500.17.43.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp5-ltss | 1.1.1l-150500.17.43.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp5 | 1.1.1l-150500.17.43.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp5-espos | 3.0.8-150500.5.54.1 | fixed |
| Suse | openssl-3 | linux enterprise high performance computing 15 sp5-ltss | 3.0.8-150500.5.54.1 | fixed |
| Suse | openssl-3 | linux enterprise server 15 sp5-ltss | 3.0.8-150500.5.54.1 | fixed |
| Suse | openssl-3 | linux enterprise server for sap applications 15 sp5 | 3.0.8-150500.5.54.1 | fixed |
| Suse | openssl-1_1-livepatches | linux enterprise live patching 15 sp4 | 0.5-150400.3.17.1 | fixed |
| Suse | openssl-3 | linux micro 6.1 | 3.1.4-slfo.1.1_7.1 | fixed |
| Suse | openssl-3 | linux enterprise module for basesystem 15 sp7 | 3.2.3-150700.5.21.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.3 | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise micro 5.4 | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp4-espos | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise high performance computing 15 sp4-ltss | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 15 sp4-ltss | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server for sap applications 15 sp4 | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | manager proxy lts 4.3 | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | manager server lts 4.3 | 1.1.1l-150400.7.84.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for basesystem 15 sp7 | 1.1.1w-150700.11.6.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for development tools 15 sp7 | 1.1.1w-150700.11.6.1 | fixed |
| Suse | openssl-1_1 | linux enterprise module for legacy 15 sp7 | 1.1.1w-150700.11.6.1 | fixed |
| Suse | openssl-3-livepatches | linux micro 6.1 | 0.2-slfo.1.1_1.1 | fixed |
| Suse | openssl-1_1-livepatches | linux enterprise live patching 15 sp5 | 0.5-150500.6.11.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise live patching 15 sp6 | 0.2-150600.13.8.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise live patching 15 sp7 | 0.2-150600.13.8.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server 12 sp5-ltss | 1.0.2p-3.98.1 | fixed |
| Suse | openssl-1_0_0 | linux enterprise server ltss extended security 12 sp5 | 1.0.2p-3.98.1 | fixed |
| Suse | openssl-3-livepatches | linux enterprise live patching 15 sp7 | 0.2-150700.16.3.2 | fixed |
| Suse | openssl1 | linux enterprise server 11 sp4 ltss extreme core | 1.0.1g-0.58.85.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server 12 sp5-ltss | 1.1.1d-2.119.1 | fixed |
| Suse | openssl-1_1 | linux enterprise server ltss extended security 12 sp5 | 1.1.1d-2.119.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | openssl | source | sid | 3.5.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | forky | 3.5.4-1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | trixie | 3.5.1-1+deb13u1 | not yet assigned | Not reported | Not reported |
| Debian | openssl | source | bookworm | 3.0.17-1~deb12u3 | not yet assigned | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.17-1~deb12u3 | Not reported | Not reported | Not reported |
| Ubuntu | openssl | deb | noble | 3.0.13-0ubuntu3.6 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-dev | deb | noble | 3.0.13-0ubuntu3.6 | Not reported | Not reported | Not reported |
| Ubuntu | libssl-doc | deb | noble | 3.0.13-0ubuntu3.6 | Not reported | Not reported | Not reported |
| Ubuntu | libssl3t64 | deb | noble | 3.0.13-0ubuntu3.6 | Not reported | Not reported | Not reported |
| Ubuntu | openssl | deb | pro | 3.0.2-0ubuntu1.20+Fips1 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl1.0 | deb | pro | 1.0.2n-1ubuntu5.13+esm2 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.20 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl-fips | deb | pro | 3.0.13-0ubuntu3.6+Fips1 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.6 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl | deb | 25.10 | 3.5.3-1ubuntu2 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Ubuntu | openssl | deb | 26.04 | 3.5.3-1ubuntu2 | Not reported | UBUNTU-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.17 | 3.0.19-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.19 | 3.1.8-r1 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.20 | 3.3.5-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.21 | 3.3.5-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.22 | 3.5.4-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.23 | 3.5.4-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Alpine | openssl | apk | 3.24 | 3.5.4-r0 | Not reported | ALPINE-CVE-2025-9230 | Not reported |
| Ubuntu | openssl | deb | pro | 1.1.1f-1ubuntu2.24+esm1 | Not reported | USN-7786-1 | Not reported |
| Ubuntu | openssl1.0 | deb | pro | 1.0.2n-1ubuntu5.13+esm2 | Not reported | USN-7786-1 | Not reported |
| Ubuntu | openssl | deb | 22.04 | 3.0.2-0ubuntu1.20 | Not reported | USN-7786-1 | Not reported |
| Ubuntu | openssl | deb | 24.04 | 3.0.13-0ubuntu3.6 | Not reported | USN-7786-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 16.0 | 3.5.0-160000.4.1 | Not reported | OPENSUSE-SU-2025:20164-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp6 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise module for legacy 15 sp7 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp4-espos | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp3-ltss | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp4-ltss | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 15 sp5-ltss | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp3 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp4 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server for sap applications 15 sp5 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | enterprise storage 7.1 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Opensuse | openssl-1_0_0 | rpm | leap 15.6 | 1.0.2p-150000.3.97.1 | Not reported | SUSE-SU-2025:4126-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.2 | 3.5.0-160000.4.1 | Not reported | SUSE-SU-2025:21224-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 16.0 | 3.5.0-160000.4.1 | Not reported | SUSE-SU-2025:21213-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 16.0 | 3.5.0-160000.4.1 | Not reported | SUSE-SU-2025:21213-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.0 | 3.1.4-10.1 | Not reported | SUSE-SU-2025:20867-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for basesystem 15 sp6 | 1.1.1w-150600.5.18.1 | Not reported | SUSE-SU-2025:03443-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for development tools 15 sp6 | 1.1.1w-150600.5.18.1 | Not reported | SUSE-SU-2025:03443-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for legacy 15 sp6 | 1.1.1w-150600.5.18.1 | Not reported | SUSE-SU-2025:03443-1 | Not reported |
| Opensuse | openssl-1_1 | rpm | leap 15.6 | 1.1.1w-150600.5.18.1 | Not reported | SUSE-SU-2025:03443-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for basesystem 15 sp6 | 3.1.4-150600.5.39.1 | Not reported | SUSE-SU-2025:03442-1 | Not reported |
| Opensuse | openssl-3 | rpm | leap 15.6 | 3.1.4-150600.5.39.1 | Not reported | SUSE-SU-2025:03442-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp3-ltss | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp3-ltss | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp3 | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.1 | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.2 | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-1_1 | rpm | enterprise storage 7.1 | 1.1.1d-150200.11.103.1 | Not reported | SUSE-SU-2025:03440-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.3 | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise micro 5.4 | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-espos | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp4-ltss | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp4-ltss | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp4 | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | manager proxy lts 4.3 | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-3 | rpm | manager server lts 4.3 | 3.0.8-150400.4.75.1 | Not reported | SUSE-SU-2025:03439-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.5 | 1.1.1l-150500.17.43.1 | Not reported | SUSE-SU-2025:03438-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp5-espos | 1.1.1l-150500.17.43.1 | Not reported | SUSE-SU-2025:03438-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp5-ltss | 1.1.1l-150500.17.43.1 | Not reported | SUSE-SU-2025:03438-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp5-ltss | 1.1.1l-150500.17.43.1 | Not reported | SUSE-SU-2025:03438-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp5 | 1.1.1l-150500.17.43.1 | Not reported | SUSE-SU-2025:03438-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp5-espos | 3.0.8-150500.5.54.1 | Not reported | SUSE-SU-2025:03441-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise high performance computing 15 sp5-ltss | 3.0.8-150500.5.54.1 | Not reported | SUSE-SU-2025:03441-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server 15 sp5-ltss | 3.0.8-150500.5.54.1 | Not reported | SUSE-SU-2025:03441-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise server for sap applications 15 sp5 | 3.0.8-150500.5.54.1 | Not reported | SUSE-SU-2025:03441-1 | Not reported |
| Suse | openssl-1_1-livepatches | rpm | linux enterprise live patching 15 sp4 | 0.5-150400.3.17.1 | Not reported | SUSE-SU-2025:3758-1 | Not reported |
| Suse | openssl-3 | rpm | linux micro 6.1 | 3.1.4-slfo.1.1_7.1 | Not reported | SUSE-SU-2025:20896-1 | Not reported |
| Suse | openssl-3 | rpm | linux enterprise module for basesystem 15 sp7 | 3.2.3-150700.5.21.1 | Not reported | SUSE-SU-2025:03546-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.3 | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise micro 5.4 | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp4-espos | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise high performance computing 15 sp4-ltss | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 15 sp4-ltss | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server for sap applications 15 sp4 | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager proxy lts 4.3 | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | manager server lts 4.3 | 1.1.1l-150400.7.84.1 | Not reported | SUSE-SU-2025:03437-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for basesystem 15 sp7 | 1.1.1w-150700.11.6.1 | Not reported | SUSE-SU-2025:03635-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for development tools 15 sp7 | 1.1.1w-150700.11.6.1 | Not reported | SUSE-SU-2025:03635-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise module for legacy 15 sp7 | 1.1.1w-150700.11.6.1 | Not reported | SUSE-SU-2025:03635-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux micro 6.1 | 0.2-slfo.1.1_1.1 | Not reported | SUSE-SU-2025:20910-1 | Not reported |
| Suse | openssl-1_1-livepatches | rpm | linux enterprise live patching 15 sp5 | 0.5-150500.6.11.1 | Not reported | SUSE-SU-2025:03522-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise live patching 15 sp6 | 0.2-150600.13.8.1 | Not reported | SUSE-SU-2025:03586-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise live patching 15 sp7 | 0.2-150600.13.8.1 | Not reported | SUSE-SU-2025:03586-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server 12 sp5-ltss | 1.0.2p-3.98.1 | Not reported | SUSE-SU-2025:03464-1 | Not reported |
| Suse | openssl-1_0_0 | rpm | linux enterprise server ltss extended security 12 sp5 | 1.0.2p-3.98.1 | Not reported | SUSE-SU-2025:03464-1 | Not reported |
| Suse | openssl-3-livepatches | rpm | linux enterprise live patching 15 sp7 | 0.2-150700.16.3.2 | Not reported | SUSE-SU-2025:3917-1 | Not reported |
| Suse | openssl1 | rpm | linux enterprise server 11 sp4 ltss extreme core | 1.0.1g-0.58.85.1 | Not reported | SUSE-SU-2025:03630-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server 12 sp5-ltss | 1.1.1d-2.119.1 | Not reported | SUSE-SU-2025:03463-1 | Not reported |
| Suse | openssl-1_1 | rpm | linux enterprise server ltss extended security 12 sp5 | 1.1.1d-2.119.1 | Not reported | SUSE-SU-2025:03463-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://cert-portal.siemens.com/productcert/csaf/ssa-089022.json]
- [https://ftp.suse.com/pub/projects/security/csaf/rhsa-2025_21248.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2025-9230]
- [https://osv.dev/vulnerability/ALPINE-CVE-2025-9230]
- [https://osv.dev/vulnerability/DLA-4321-1]
- [https://osv.dev/vulnerability/DSA-6015-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03437-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03438-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03439-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03440-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03441-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03442-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03443-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03463-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03464-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03522-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03546-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03586-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03630-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:03635-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20867-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20896-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:20910-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:21213-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:21224-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:3758-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:3917-1]
- [https://osv.dev/vulnerability/SUSE-SU-2025:4126-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2025-9230]
- [https://osv.dev/vulnerability/USN-7786-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2025:20164-1]
- [https://security-tracker.debian.org/tracker/CVE-2025-9230]
- [https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-9230.json]
- [https://ubuntu.com/security/notices/USN-7786-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0647.json]
[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]