Every applicability statement published about this vulnerability, kept as each source wrote it rather than merged into one verdict. Where sources disagree, both positions are shown.
A statement that names no version covers the whole product, which is not the same as your version falling inside a range. Orderings marked best effort come from schemes with no published comparison algorithm; exact ones follow a published specification.
Precedence decides which claim wins when two sources describe the same product over the same version range. It is a property of the source, not of the claim, and changing it re-ranks the data without re-reading a single document.
| Product | Status | Versions | Remediation | Source | |
|---|---|---|---|---|---|
| Red Hat Hardened Images:openssl-0:3.5.6-0.1.hum1@aarch64 openssl-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-0:3.5.6-0.1.hum1@src openssl-0:3.5.6-0.1.hum1@src as a component of Red Hat Hardened Images | fixed | openssl-0:3.5.6-0.1.hum1@src | vendor fix → openssl-0:3.5.6-0.1.hum1@src (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-0:3.5.6-0.1.hum1@x86_64 openssl-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-config-fips-0:3.5.6-0.1.hum1@aarch64 openssl-config-fips-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-config-fips-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-config-fips-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-config-fips-0:3.5.6-0.1.hum1@x86_64 openssl-config-fips-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-config-fips-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-config-fips-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-devel-0:3.5.6-0.1.hum1@aarch64 openssl-devel-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-devel-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-devel-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-devel-0:3.5.6-0.1.hum1@x86_64 openssl-devel-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-devel-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-devel-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-devel-engine-0:3.5.6-0.1.hum1@aarch64 openssl-devel-engine-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-devel-engine-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-devel-engine-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-devel-engine-0:3.5.6-0.1.hum1@x86_64 openssl-devel-engine-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-devel-engine-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-devel-engine-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-libs-0:3.5.6-0.1.hum1@aarch64 openssl-libs-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-libs-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-libs-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-libs-0:3.5.6-0.1.hum1@x86_64 openssl-libs-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-libs-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-libs-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-perl-0:3.5.6-0.1.hum1@aarch64 openssl-perl-0:3.5.6-0.1.hum1@aarch64 as a component of Red Hat Hardened Images | fixed | openssl-perl-0:3.5.6-0.1.hum1@aarch64 | vendor fix → openssl-perl-0:3.5.6-0.1.hum1@aarch64 (RHSA-2026:7261) | csaf_redhat | |
| Red Hat Hardened Images:openssl-perl-0:3.5.6-0.1.hum1@x86_64 openssl-perl-0:3.5.6-0.1.hum1@x86_64 as a component of Red Hat Hardened Images | fixed | openssl-perl-0:3.5.6-0.1.hum1@x86_64 | vendor fix → openssl-perl-0:3.5.6-0.1.hum1@x86_64 (RHSA-2026:7261) | csaf_redhat | |
| red_hat_enterprise_linux_7:AAVMF AAVMF as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: AAVMF | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:compat-openssl10 compat-openssl10 as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: compat-openssl10 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:compat-openssl10.src compat-openssl10.src as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: compat-openssl10.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:compat-openssl11 compat-openssl11 as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: compat-openssl11 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:compat-openssl11.src compat-openssl11.src as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: compat-openssl11.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:edk2-aarch64 edk2-aarch64 as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: edk2-aarch64 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:edk2-aarch64 edk2-aarch64 as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: edk2-aarch64 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:edk2-ovmf edk2-ovmf as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: edk2-ovmf | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:edk2-ovmf edk2-ovmf as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: edk2-ovmf | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:edk2-tools edk2-tools as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: edk2-tools | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:edk2-tools-doc edk2-tools-doc as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: edk2-tools-doc | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_10:edk2.src edk2.src as a component of Red Hat Enterprise Linux 10 | not affected vulnerable code not present | no version stated vendor label: edk2.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:edk2.src edk2.src as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: edk2.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:edk2.src edk2.src as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: edk2.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw-openssl.src mingw-openssl.src as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: mingw-openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw32-openssl mingw32-openssl as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: mingw32-openssl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:mingw64-openssl mingw64-openssl as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: mingw64-openssl | not applicable | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8 openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4 | not affected component not present | openshift/ose-rhel-coreos-8 | not applicable | csaf_redhat | |
| red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9 openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4 | not affected component not present | openshift/ose-rhel-coreos-9 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl openssl as a component of Red Hat Enterprise Linux 6 | not affected vulnerable code not present | no version stated vendor label: openssl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl openssl as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl openssl as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:openssl openssl as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: openssl | not applicable | csaf_redhat | |
| red_hat_jboss_core_services:openssl openssl as a component of Red Hat JBoss Core Services | not affected component not present | no version stated vendor label: openssl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 6 | not affected vulnerable code not present | no version stated vendor label: openssl-devel | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl-devel | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl-devel | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:openssl-devel openssl-devel as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: openssl-devel | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-libs openssl-libs as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl-libs | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl-libs openssl-libs as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl-libs | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:openssl-libs openssl-libs as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: openssl-libs | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 6 | not affected vulnerable code not present | no version stated vendor label: openssl-perl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl-perl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl-perl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:openssl-perl openssl-perl as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: openssl-perl | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl-static openssl-static as a component of Red Hat Enterprise Linux 6 | not affected vulnerable code not present | no version stated vendor label: openssl-static | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl-static openssl-static as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl-static | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl-static openssl-static as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl-static | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_10:openssl.src openssl.src as a component of Red Hat Enterprise Linux 10 | not affected component not present | no version stated vendor label: openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_6:openssl.src openssl.src as a component of Red Hat Enterprise Linux 6 | not affected vulnerable code not present | no version stated vendor label: openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:openssl.src openssl.src as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:openssl.src openssl.src as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:openssl.src openssl.src as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: openssl.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:OVMF OVMF as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: OVMF | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_7:ovmf.src ovmf.src as a component of Red Hat Enterprise Linux 7 | not affected vulnerable code not present | no version stated vendor label: ovmf.src | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_8:shim-aa64 shim-aa64 as a component of Red Hat Enterprise Linux 8 | not affected vulnerable code not present | no version stated vendor label: shim-aa64 | not applicable | csaf_redhat | |
| red_hat_enterprise_linux_9:shim-aa64 shim-aa64 as a component of Red Hat Enterprise Linux 9 | not affected vulnerable code not present | no version stated vendor label: shim-aa64 | not applicable | csaf_redhat |
A claim with no version range is shown as written rather than expanded: a government catalog naming only a vendor and product is a real statement at zero granularity, and inventing bounds for it would put precision in the record that the source never offered.