UBUNTU-CVE-2021-3449

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2021-3449

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2021/UBUNTU-CVE-2021-3449.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2021-3449

Related

Published

2021-03-25T00:00:00Z

Modified

2025-01-13T10:22:24Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension (where it was present in the initial ClientHello), but includes a signaturealgorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).

References

Affected packages

Ubuntu:Pro:14.04:LTS / postgresql-9.3

Package

Name: postgresql-9.3
Purl: pkg:deb/ubuntu/postgresql-9.3@9.3.24-0ubuntu0.14.04+esm1?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

9.*

9.3.1-1

9.3.2-1

9.3.2-1ubuntu1

9.3.2-1ubuntu2

9.3.3-1

9.3.3-1bzr1

9.3.3-1bzr2

9.3.4-1

9.3.5-0ubuntu0.14.04.1

9.3.6-0ubuntu0.14.04

9.3.7-0ubuntu0.14.04

9.3.8-0ubuntu0.4.04

9.3.9-0ubuntu0.14.04

9.3.10-0ubuntu0.14.04

9.3.11-0ubuntu0.14.04

9.3.12-0ubuntu0.14.04

9.3.13-0ubuntu0.14.04

9.3.14-0ubuntu0.14.04

9.3.15-0ubuntu0.14.04

9.3.16-0ubuntu0.14.04

9.3.17-0ubuntu0.14.04

9.3.18-0ubuntu0.14.04.1

9.3.19-0ubuntu0.14.04

9.3.20-0ubuntu0.14.04

9.3.21-0ubuntu0.14.04

9.3.22-0ubuntu0.14.04

9.3.23-0ubuntu0.14.04

9.3.24-0ubuntu0.14.04

9.3.24-0ubuntu0.14.04+esm1

Ecosystem specific

{
    "ubuntu_priority": "high"
}

Ubuntu:16.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.0.2g-1ubuntu4.19?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2g-1ubuntu4.19

Affected versions

1.*

1.0.2d-0ubuntu1

1.0.2d-0ubuntu2

1.0.2e-1ubuntu1

1.0.2f-2ubuntu1

1.0.2g-1ubuntu2

1.0.2g-1ubuntu3

1.0.2g-1ubuntu4

1.0.2g-1ubuntu4.1

1.0.2g-1ubuntu4.2

1.0.2g-1ubuntu4.4

1.0.2g-1ubuntu4.5

1.0.2g-1ubuntu4.6

1.0.2g-1ubuntu4.8

1.0.2g-1ubuntu4.9

1.0.2g-1ubuntu4.10

1.0.2g-1ubuntu4.11

1.0.2g-1ubuntu4.12

1.0.2g-1ubuntu4.13

1.0.2g-1ubuntu4.14

1.0.2g-1ubuntu4.15

1.0.2g-1ubuntu4.16

1.0.2g-1ubuntu4.17

1.0.2g-1ubuntu4.18

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.0.0-udeb",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libcrypto1.0.0-udeb-dbgsym",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl-dev-dbgsym",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl1.0.0",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl1.0.0-dbg",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl1.0.0-dbgsym",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl1.0.0-udeb",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "libssl1.0.0-udeb-dbgsym",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.0.2g-1ubuntu4.19"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.0.2g-1ubuntu4.19"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:18.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.1~18.04.9?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-1ubuntu2.1~18.04.9

Affected versions

1.*

1.0.2g-1ubuntu13

1.0.2g-1ubuntu14

1.0.2n-1ubuntu1

1.1.0g-2ubuntu1

1.1.0g-2ubuntu2

1.1.0g-2ubuntu3

1.1.0g-2ubuntu4

1.1.0g-2ubuntu4.1

1.1.0g-2ubuntu4.3

1.1.1-1ubuntu2.1~18.04.1

1.1.1-1ubuntu2.1~18.04.2

1.1.1-1ubuntu2.1~18.04.3

1.1.1-1ubuntu2.1~18.04.4

1.1.1-1ubuntu2.1~18.04.5

1.1.1-1ubuntu2.1~18.04.6

1.1.1-1ubuntu2.1~18.04.7

1.1.1-1ubuntu2.1~18.04.8

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.1-udeb",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "libssl1.1",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "libssl1.1-dbgsym",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "libssl1.1-udeb",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.1.1-1ubuntu2.1~18.04.9"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:18.04:LTS / openssl1.0

Package

Name: openssl1.0
Purl: pkg:deb/ubuntu/openssl1.0@1.0.2n-1ubuntu5.6?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.2n-1ubuntu5.6

Affected versions

1.*

1.0.2n-1ubuntu2

1.0.2n-1ubuntu3

1.0.2n-1ubuntu4

1.0.2n-1ubuntu5

1.0.2n-1ubuntu5.1

1.0.2n-1ubuntu5.2

1.0.2n-1ubuntu5.3

1.0.2n-1ubuntu5.4

1.0.2n-1ubuntu5.5

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.0.0-udeb",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "libssl1.0-dev",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "libssl1.0.0",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "libssl1.0.0-dbgsym",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "libssl1.0.0-udeb",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "openssl1.0",
            "binary_version": "1.0.2n-1ubuntu5.6"
        },
        {
            "binary_name": "openssl1.0-dbgsym",
            "binary_version": "1.0.2n-1ubuntu5.6"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:18.04:LTS / postgresql-10

Package

Name: postgresql-10
Purl: pkg:deb/ubuntu/postgresql-10@10.18-0ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10.18-0ubuntu0.18.04.1

Affected versions

10.*

10.1-1

10.1-2

10.2-1

10.3-1

10.4-0ubuntu0.18.04

10.5-0ubuntu0.18.04

10.6-0ubuntu0.18.04.1

10.7-0ubuntu0.18.04.1

10.8-0ubuntu0.18.04.1

10.9-0ubuntu0.18.04.1

10.10-0ubuntu0.18.04.1

10.12-0ubuntu0.18.04.1

10.14-0ubuntu0.18.04.1

10.15-0ubuntu0.18.04.1

10.16-0ubuntu0.18.04.1

10.17-0ubuntu0.18.04.1

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libecpg-compat3",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libecpg-compat3-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libecpg-dev",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libecpg-dev-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libecpg6",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libecpg6-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libpgtypes3",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libpgtypes3-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libpq-dev",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libpq5",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "libpq5-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-client-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-client-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-doc-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plperl-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plperl-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plpython-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plpython-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plpython3-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-plpython3-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-pltcl-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-pltcl-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-server-dev-10",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        },
        {
            "binary_name": "postgresql-server-dev-10-dbgsym",
            "binary_version": "10.18-0ubuntu0.18.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:FIPS-updates:18.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.fips.2.1~18.04.9.1?arch=source&distro=fips-updates/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1-1ubuntu2.fips.2.1~18.04.9.1

Affected versions

1.*

1.1.1-1ubuntu2.fips.2.1~18.04.5.1

1.1.1-1ubuntu2.fips.2.1~18.04.6.1

1.1.1-1ubuntu2.fips.2.1~18.04.7.1

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.1-udeb",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl1.1",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl1.1-dbgsym",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl1.1-hmac",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "libssl1.1-udeb",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.1.1-1ubuntu2.fips.2.1~18.04.9.1"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:FIPS:18.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1-1ubuntu2.fips.2.1~18.04.15.2?arch=source&distro=fips/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.1.1-1ubuntu2.fips.2.1~18.04.3.1

1.1.1-1ubuntu2.fips.2.1~18.04.15.2

Ecosystem specific

{
    "ubuntu_priority": "high"
}

Ubuntu:20.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.3?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-1ubuntu2.3

Affected versions

1.*

1.1.1c-1ubuntu4

1.1.1d-2ubuntu3

1.1.1d-2ubuntu6

1.1.1f-1ubuntu1

1.1.1f-1ubuntu2

1.1.1f-1ubuntu2.1

1.1.1f-1ubuntu2.2

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "libssl1.1",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "libssl1.1-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "libssl1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.1.1f-1ubuntu2.3"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.3"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:20.04:LTS / postgresql-12

Package

Name: postgresql-12
Purl: pkg:deb/ubuntu/postgresql-12@12.8-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

12.8-0ubuntu0.20.04.1

Affected versions

12.*

12.0-1

12.1-1

12.1-2build1

12.2-1

12.2-1ubuntu2

12.2-4

12.4-0ubuntu0.20.04.1

12.5-0ubuntu0.20.04.1

12.6-0ubuntu0.20.04.1

12.7-0ubuntu0.20.04.1

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libecpg-compat3",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libecpg-compat3-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libecpg-dev",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libecpg-dev-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libecpg6",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libecpg6-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libpgtypes3",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libpgtypes3-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libpq-dev",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libpq5",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "libpq5-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-12-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-client-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-client-12-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-doc-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-plperl-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-plperl-12-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-plpython3-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-plpython3-12-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-pltcl-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-pltcl-12-dbgsym",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        },
        {
            "binary_name": "postgresql-server-dev-12",
            "binary_version": "12.8-0ubuntu0.20.04.1"
        }
    ],
    "availability": "No subscription required"
}

Ubuntu:Pro:FIPS-updates:20.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.fips.7?arch=source&distro=fips-updates/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-1ubuntu2.fips.7

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl1.1",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl1.1-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl1.1-hmac",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "libssl1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.fips.7"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:Pro:FIPS:20.04:LTS / openssl

Package

Name: openssl
Purl: pkg:deb/ubuntu/openssl@1.1.1f-1ubuntu2.fips.2.8?arch=source&distro=fips/focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.1f-1ubuntu2.fips.2.8

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libcrypto1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl-dev",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl-doc",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl1.1",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl1.1-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl1.1-hmac",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "libssl1.1-udeb",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "openssl",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        },
        {
            "binary_name": "openssl-dbgsym",
            "binary_version": "1.1.1f-1ubuntu2.fips.2.8"
        }
    ],
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro"
}

Ubuntu:22.04:LTS / nodejs

Package

Name: nodejs
Purl: pkg:deb/ubuntu/nodejs@12.22.9~dfsg-1ubuntu3?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

12.22.9~dfsg-1ubuntu3

Affected versions

12.*

12.22.5~dfsg-5ubuntu1

12.22.7~dfsg-2ubuntu1

12.22.7~dfsg-2ubuntu3

12.22.9~dfsg-1ubuntu2

Ecosystem specific

{
    "ubuntu_priority": "high",
    "binaries": [
        {
            "binary_name": "libnode-dev",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        },
        {
            "binary_name": "libnode72",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        },
        {
            "binary_name": "libnode72-dbgsym",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        },
        {
            "binary_name": "nodejs",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        },
        {
            "binary_name": "nodejs-dbgsym",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        },
        {
            "binary_name": "nodejs-doc",
            "binary_version": "12.22.9~dfsg-1ubuntu3"
        }
    ],
    "availability": "No subscription required"
}