{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux7els/vex/2026/cve-2026-22795-els_os-oraclelinux7els.json" } ], "tracking": { "current_release_date": "2026-02-10T14:39:45Z", "generator": { "date": "2026-02-10T14:39:45Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2026-22795-ELS_OS-ORACLELINUX7ELS", "initial_release_date": "2026-01-27T00:00:00Z", "revision_history": [ { "date": "2026-01-27T00:00:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-10T14:39:45Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "Security update on CVE-2026-22795" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 7", "product": { "name": "Oracle Linux 7", "product_id": "Oracle-Linux-7", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" }, { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl@1.0.2k-26.el7_9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-devel@1.0.2k-26.el7_9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-libs@1.0.2k-26.el7_9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-perl@1.0.2k-26.el7_9?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.x86_64", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-static@1.0.2k-26.el7_9?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-devel@1.0.2k-26.el7_9?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-libs@1.0.2k-26.el7_9?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.i686", "product_identification_helper": { "purl": "pkg:rpm/oracle/openssl-static@1.0.2k-26.el7_9?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-perl@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els6?arch=x86_64&epoch=1" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-devel@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-libs@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } }, { "category": "product_version", "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_id": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/openssl-static@1.0.2k-26.el7_9.tuxcare.els6?arch=i686&epoch=1" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-1:1.0.2k-26.el7_9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.x86_64" }, "product_reference": "openssl-1:1.0.2k-26.el7_9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.i686" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-devel-1:1.0.2k-26.el7_9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.x86_64" }, "product_reference": "openssl-devel-1:1.0.2k-26.el7_9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.i686" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-libs-1:1.0.2k-26.el7_9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.x86_64" }, "product_reference": "openssl-libs-1:1.0.2k-26.el7_9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-perl-1:1.0.2k-26.el7_9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.x86_64" }, "product_reference": "openssl-perl-1:1.0.2k-26.el7_9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.i686 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.i686" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.i686", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "relates_to_product_reference": "Oracle-Linux-7" }, { "category": "default_component_of", "full_product_name": { "name": "openssl-static-1:1.0.2k-26.el7_9.x86_64 as a component of Oracle Linux 7", "product_id": "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.x86_64" }, "product_reference": "openssl-static-1:1.0.2k-26.el7_9.x86_64", "relates_to_product_reference": "Oracle-Linux-7" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-22795", "cwe": { "id": "CWE-843", "name": "Access of Resource Using Incompatible Type ('Type Confusion')" }, "notes": [ { "category": "description", "text": "Issue summary: An invalid or NULL pointer dereference can happen in\nan application processing a malformed PKCS#12 file.\nImpact summary: An application processing a malformed PKCS#12 file can be\ncaused to dereference an invalid or NULL pointer on memory read, resulting\nin a Denial of Service.\nA type confusion vulnerability exists in PKCS#12 parsing code where\nan ASN1_TYPE union member is accessed without first validating the type,\ncausing an invalid pointer read.\nThe location is constrained to a 1-byte address space, meaning any\nattempted pointer manipulation can only target addresses between 0x00 and 0xFF.\nThis range corresponds to the zero page, which is unmapped on most modern\noperating systems and will reliably result in a crash, leading only to a\nDenial of Service. Exploiting this issue also requires a user or application\nto process a maliciously crafted PKCS#12 file. It is uncommon to accept\nuntrusted PKCS#12 files in applications as they are usually used to store\nprivate keys which are trusted by definition. For these reasons, the issue\nwas assessed as Low severity.\nThe FIPS modules in 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the PKCS12 implementation is outside the OpenSSL FIPS module boundary.\nOpenSSL 3.6, 3.5, 3.4, 3.3, 3.0 and 1.1.1 are vulnerable to this issue.\nOpenSSL 1.0.2 is not affected by this issue.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-22795" } ], "release_date": "2026-01-27T00:00:00Z", "remediations": [ { "category": "no_fix_planned", "details": "- Exploitation requires a user or application to import an attacker‑crafted PKCS#12 file, i.e., there is no remote attack surface and user interaction is required. \n- The flaw is an invalid/NULL pointer read constrained to the zero page (0x00–0xFF), which deterministically causes a crash without a path to code execution or data disclosure, so the impact is limited to availability. \n- OpenSSL FIPS 3.x modules are not affected because PKCS#12 parsing is outside the FIPS module boundary, further reducing relevance in hardened enterprise deployments.", "product_ids": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-devel-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-libs-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-perl-1:1.0.2k-26.el7_9.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.i686", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.tuxcare.els6.x86_64", "Oracle-Linux-7:openssl-static-1:1.0.2k-26.el7_9.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }