[security bulletin] HPESBGN03728 rev.1 - HPE Operations Agent using OpenSSL, Remote Denial of Service (DoS), Unauthorized Access to Data
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