[security bulletin] HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remote Denial of Service (DoS) and Disclosure of Sensitive Information
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