{
	"document":{
		"aggregate_severity":{
			"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
			"text":"High"
		},
		"category":"csaf_vex",
		"csaf_version":"2.0",
		"distribution":{
			"tlp":{
				"label":"WHITE",
				"url":"https:/www.first.org/tlp/"
			}
		},
		"lang":"en",
		"notes":[
			{
				"text":"openssl security update",
				"category":"general",
				"title":"Synopsis"
			},
			{
				"text":"An update for openssl is now available for openEuler-24.03-LTS-SP1",
				"category":"general",
				"title":"Summary"
			},
			{
				"text":"The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL tookit and its related documentation.\n\nSecurity Fix(es):\n\nValidating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.(CVE-2024-41996)",
				"category":"general",
				"title":"Description"
			},
			{
				"text":"An update for openssl is now available for openEuler-24.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
				"category":"general",
				"title":"Topic"
			},
			{
				"text":"High",
				"category":"general",
				"title":"Severity"
			},
			{
				"text":"openssl",
				"category":"general",
				"title":"Affected Component"
			}
		],
		"publisher":{
			"issuing_authority":"openEuler security committee",
			"name":"openEuler",
			"namespace":"https://www.openeuler.org",
			"contact_details":"openeuler-security@openeuler.org",
			"category":"vendor"
		},
		"references":[
			{
				"summary":"openEuler-SA-2025-2325",
				"category":"self",
				"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2325"
			},
			{
				"summary":"CVE-2024-41996",
				"category":"self",
				"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41996&packageName=openssl"
			},
			{
				"summary":"nvd cve",
				"category":"external",
				"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41996"
			},
			{
				"summary":"openEuler-SA-2025-2325 vex file",
				"category":"self",
				"url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openeuler-sa-2025-2325.json"
			}
		],
		"title":"An update for openssl is now available for openEuler-24.03-LTS-SP1",
		"tracking":{
			"initial_release_date":"2025-09-26T21:13:16+08:00",
			"revision_history":[
				{
					"date":"2025-09-26T21:13:16+08:00",
					"summary":"Initial",
					"number":"1.0.0"
				}
			],
			"generator":{
				"date":"2025-09-26T21:13:16+08:00",
				"engine":{
					"name":"openEuler CSAF Tool V1.0"
				}
			},
			"current_release_date":"2025-09-26T21:13:16+08:00",
			"id":"openEuler-SA-2025-2325",
			"version":"1.0.0",
			"status":"final"
		}
	},
	"product_tree":{
		"branches":[
			{
				"name":"openEuler",
				"category":"vendor",
				"branches":[
					{
						"name":"openEuler",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openEuler-24.03-LTS-SP1",
									"name":"openEuler-24.03-LTS-SP1"
								},
								"name":"openEuler-24.03-LTS-SP1",
								"category":"product_version"
							}
						],
						"category":"product_name"
					},
					{
						"name":"aarch64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-debugsource-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-debugsource-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-debugsource-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-devel-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-devel-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-devel-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-libs-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-libs-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-libs-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-perl-3.0.12-22.oe2403sp1.aarch64.rpm",
									"name":"openssl-perl-3.0.12-22.oe2403sp1.aarch64.rpm"
								},
								"name":"openssl-perl-3.0.12-22.oe2403sp1.aarch64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"src",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-3.0.12-22.oe2403sp1.src.rpm",
									"name":"openssl-3.0.12-22.oe2403sp1.src.rpm"
								},
								"name":"openssl-3.0.12-22.oe2403sp1.src.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"x86_64",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-debugsource-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-debugsource-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-debugsource-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-devel-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-devel-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-devel-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-libs-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-libs-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-libs-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							},
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-perl-3.0.12-22.oe2403sp1.x86_64.rpm",
									"name":"openssl-perl-3.0.12-22.oe2403sp1.x86_64.rpm"
								},
								"name":"openssl-perl-3.0.12-22.oe2403sp1.x86_64.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					},
					{
						"name":"noarch",
						"branches":[
							{
								"product":{
									"product_identification_helper":{
										"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
									},
									"product_id":"openssl-help-3.0.12-22.oe2403sp1.noarch.rpm",
									"name":"openssl-help-3.0.12-22.oe2403sp1.noarch.rpm"
								},
								"name":"openssl-help-3.0.12-22.oe2403sp1.noarch.rpm",
								"category":"product_version"
							}
						],
						"category":"architecture"
					}
				]
			}
		],
		"relationships":[
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-debugsource-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-debugsource-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-devel-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-devel-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-libs-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-libs-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-perl-3.0.12-22.oe2403sp1.aarch64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.aarch64",
					"name":"openssl-perl-3.0.12-22.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-3.0.12-22.oe2403sp1.src.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.src",
					"name":"openssl-3.0.12-22.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-debugsource-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-debugsource-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-devel-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-devel-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-libs-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-libs-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-perl-3.0.12-22.oe2403sp1.x86_64.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.x86_64",
					"name":"openssl-perl-3.0.12-22.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			},
			{
				"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
				"product_reference":"openssl-help-3.0.12-22.oe2403sp1.noarch.rpm",
				"full_product_name":{
					"product_id":"openEuler-24.03-LTS-SP1:openssl-help-3.0.12-22.oe2403sp1.noarch",
					"name":"openssl-help-3.0.12-22.oe2403sp1.noarch as a component of openEuler-24.03-LTS-SP1"
				},
				"category":"default_component_of"
			}
		]
	},
	"vulnerabilities":[
		{
			"cve":"CVE-2024-41996",
			"notes":[
				{
					"text":"Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource consumption. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE and validate the order of the public key.",
					"category":"description",
					"title":"Vulnerability Description"
				}
			],
			"product_status":{
				"fixed":[
					"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.aarch64",
					"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.src",
					"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.x86_64",
					"openEuler-24.03-LTS-SP1:openssl-help-3.0.12-22.oe2403sp1.noarch"
				]
			},
			"remediations":[
				{
					"product_ids":[
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-help-3.0.12-22.oe2403sp1.noarch"
					],
					"details":"openssl security update",
					"category":"vendor_fix",
					"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2325"
				}
			],
			"scores":[
				{
					"cvss_v3":{
						"baseSeverity":"HIGH",
						"baseScore":7.5,
						"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
						"version":"3.1"
					},
					"products":[
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.aarch64",
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.src",
						"openEuler-24.03-LTS-SP1:openssl-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-debuginfo-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-debugsource-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-devel-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-libs-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-perl-3.0.12-22.oe2403sp1.x86_64",
						"openEuler-24.03-LTS-SP1:openssl-help-3.0.12-22.oe2403sp1.noarch"
					]
				}
			],
			"threats":[
				{
					"details":"High",
					"category":"impact"
				}
			],
			"title":"CVE-2024-41996"
		}
	]
}