[maint-26] Vendor vulnerability found

[erlang-scanner-bot]

Vulnerability Detected

The following CVEs must be checked in OpenVex statements for maint-26:

• github.com/openssl/openssl: CVE-2016-0701,CVE-2016-0702,CVE-2016-0703,CVE-2016-0704,CVE-2016-0705,CVE-2016-0797,CVE-2016-0798,CVE-2016-0799,CVE-2016-0800,CVE-2016-2105,CVE-2016-2106,CVE-2016-2107,CVE-2016-2108,CVE-2016-2109,CVE-2016-2176,CVE-2016-2177,CVE-2016-2178,CVE-2016-2179,CVE-2016-2181,CVE-2016-2182,CVE-2016-2842,CVE-2016-6302,CVE-2016-6303,CVE-2016-6304,CVE-2016-6305,CVE-2016-6306,CVE-2016-6307,CVE-2016-6308,CVE-2016-6309,CVE-2016-7052,CVE-2016-7053,CVE-2016-7056,CVE-2016-8610,CVE-2017-3730,CVE-2017-3731,CVE-2017-3732,CVE-2017-3733,CVE-2017-3735,CVE-2017-3737,CVE-2017-3738,CVE-2018-0734,CVE-2018-0735,CVE-2018-5407

Please follow instructions on how to do this from:
https://github.com/erlang/otp/blob/master/HOWTO/SBOM.md#vex

[kikofernandez]

Blocked by google/osv.dev#5192

[kikofernandez]

Closing due to google/osv.dev#5192 fix, so these vulnerabilities should not apply to OTP anymore