| Package | Affected versions | Patched versions |
|---|---|---|
| node.js | = 10.13.0≥ 10.0.0, ≤ 10.12.0≥ 11.0.0, < 11.3.0≥ 6.0.0, ≤ 6.8.1≥ 6.9.0, < 6.15.0≥ 8.0.0, ≤ 8.8.1≥ 8.9.0, < 8.14.0 | 11.3.06.15.08.14.0 |
| openssl | = 1.1.1≥ 1.0.2, ≤ 1.0.2p≥ 1.1.0, ≤ 1.1.0i | |
| api gateway | = 11.1.2.4.0 | |
| e-business suite technology stack | = 0.9.8= 1.0.0= 1.0.1 | |
| enterprise manager base platform | = 12.1.0.5.0= 13.2.0.0.0= 13.3.0.0.0 | |
| enterprise manager ops center | = 12.3.3 | |
| mysql enterprise backup | ≥ 3.0, ≤ 3.12.3≥ 4.0, ≤ 4.1.2 | |
| peoplesoft enterprise peopletools | = 8.55= 8.56= 8.57 | |
| primavera p6 professional project management | = 15.1= 15.2= 16.1= 16.2= 18.8= 8.4≥ 17.7, ≤ 17.12 | |
| tuxedo | = 12.1.1.0.0 |
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free