Action not permitted
Modal body text goes here.
CVE-2013-0276
Vulnerability from cvelistv5
Published
2013-02-13 01:00
Modified
2024-08-06 14:18
Severity ?
EPSS score ?
Summary
ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.
References
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-06T14:18:09.823Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "57896", "tags": [ "vdb-entry", "x_refsource_BID", "x_transferred" ], "url": "http://www.securityfocus.com/bid/57896" }, { "name": "52774", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/52774" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://support.apple.com/kb/HT5784" }, { "name": "DSA-2620", "tags": [ "vendor-advisory", "x_refsource_DEBIAN", "x_transferred" ], "url": "http://www.debian.org/security/2013/dsa-2620" }, { "name": "APPLE-SA-2013-06-04-1", "tags": [ "vendor-advisory", "x_refsource_APPLE", "x_transferred" ], "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html" }, { "name": "[oss-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "http://www.openwall.com/lists/oss-security/2013/02/11/5" }, { "name": "RHSA-2013:0686", "tags": [ "vendor-advisory", "x_refsource_REDHAT", "x_transferred" ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html" }, { "name": "openSUSE-SU-2013:0462", "tags": [ "vendor-advisory", "x_refsource_SUSE", "x_transferred" ], "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" }, { "name": "90072", "tags": [ "vdb-entry", "x_refsource_OSVDB", "x_transferred" ], "url": "http://www.osvdb.org/90072" }, { "tags": [ "x_refsource_CONFIRM", "x_transferred" ], "url": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/" }, { "name": "52112", "tags": [ "third-party-advisory", "x_refsource_SECUNIA", "x_transferred" ], "url": "http://secunia.com/advisories/52112" }, { "name": "[rubyonrails-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "tags": [ "mailing-list", "x_refsource_MLIST", "x_transferred" ], "url": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2013-02-11T00:00:00", "descriptions": [ { "lang": "en", "value": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2013-03-06T10:00:00", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat" }, "references": [ { "name": "57896", "tags": [ "vdb-entry", "x_refsource_BID" ], "url": "http://www.securityfocus.com/bid/57896" }, { "name": "52774", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/52774" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://support.apple.com/kb/HT5784" }, { "name": "DSA-2620", "tags": [ "vendor-advisory", "x_refsource_DEBIAN" ], "url": "http://www.debian.org/security/2013/dsa-2620" }, { "name": "APPLE-SA-2013-06-04-1", "tags": [ "vendor-advisory", "x_refsource_APPLE" ], "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html" }, { "name": "[oss-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "http://www.openwall.com/lists/oss-security/2013/02/11/5" }, { "name": "RHSA-2013:0686", "tags": [ "vendor-advisory", "x_refsource_REDHAT" ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html" }, { "name": "openSUSE-SU-2013:0462", "tags": [ "vendor-advisory", "x_refsource_SUSE" ], "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" }, { "name": "90072", "tags": [ "vdb-entry", "x_refsource_OSVDB" ], "url": "http://www.osvdb.org/90072" }, { "tags": [ "x_refsource_CONFIRM" ], "url": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/" }, { "name": "52112", "tags": [ "third-party-advisory", "x_refsource_SECUNIA" ], "url": "http://secunia.com/advisories/52112" }, { "name": "[rubyonrails-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "tags": [ "mailing-list", "x_refsource_MLIST" ], "url": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain" } ] } }, "cveMetadata": { "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2013-0276", "datePublished": "2013-02-13T01:00:00", "dateReserved": "2012-12-06T00:00:00", "dateUpdated": "2024-08-06T14:18:09.823Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1", "meta": { "nvd": "{\"cve\":{\"id\":\"CVE-2013-0276\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2013-02-13T01:55:05.167\",\"lastModified\":\"2019-08-08T15:42:45.623\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.\"},{\"lang\":\"es\",\"value\":\"ActiveRecord en Ruby on Rails v3.2.x anteriores a v3.2.12, v3.1.x anteriores a v3.1.11, y v2.3.x anteriores a v2.3.17 permite a atacantes remotos evitar el mecanismo de protecci\u00f3n \\\"attr_protected\\\" y modificar el modelo de atributos protegidos a trav\u00e9s de una petici\u00f3n hecha a mano.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:N/I:P/A:N\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\",\"baseScore\":4.3},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2816C02C-E13E-4367-91F3-14756A90EC9E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"E82AF7C7-B725-40EF-8EE3-18F8E7FAEB29\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AE674DE-65DB-437E-A034-A2EE5C584B33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0524F3E3-BAD7-4CD3-A6E7-74CFBE4B46E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32EB2C3F-0F24-43DB-988E-BD2973598F71\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB32713D-FE64-445E-872E-B4678C243AB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C55E6B4A-2B9C-46C8-A739-109EA4BA7FD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"89C618DC-38BC-4484-8C41-BC38B7EB636B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE1EF01A-F358-45D3-ADA2-51DD1D8CB6E2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC2616BD-A4E8-42F3-BB5A-7517DC4EDA3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E376782-98B0-4766-B6FC-67E032A00C62\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96D08DC1-14E9-4DB9-BC95-3F73B454FBC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F365C9E5-27DC-46C3-AFE4-4876EC7B352B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F0016A6-0ED6-443D-B969-CB1226D8E28C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E69470EA-5EBC-4FB9-A722-5B61C70C1140\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B13A8EBB-4211-4AB1-8872-244EEEE20ABD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9AB2152-DED8-4CFD-B915-94A9F56FDD05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C630AB60-DBAF-421E-B663-492BAE8A180F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB51F3E9-4899-49A9-9E7B-0DCA92A91DD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"F884F2F4-94F3-46CB-860B-1BCC0EEF408A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"88DFBB48-1C29-4639-9369-F5B413CA2337\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"D37696D7-BEE6-4587-9E33-A7FE24780409\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"E95B5D44-0C8D-47BC-A89D-48A5BDEB84F4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DFDAF6A-76AA-436F-A4F3-DA69892DE2B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3172982-3FA4-427F-BE3E-2321D804E49D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"FD6EC85B-F092-48FF-966A-96B9227C8656\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"9000F3C1-57A0-474C-9C82-E58688F29838\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E55E42E-AB6A-4E47-AC69-DFDAEB0A8735\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A42F4E7A-6F6A-485C-8D30-95F3B0285922\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"30B9C0CB-F6E6-4233-84E4-D6E69104DD73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"84309CC7-A8B7-4ADB-AEA1-964DA5F7B0E0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"5343241F-274D-45FF-97C7-2BC2E920BAF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FED122B8-AF4C-4C48-B1E5-54F4A7A31A53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"157ACCAD-0FB8-4CC9-9DFB-70835DE6506C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E50ACF6-7277-4C9A-B42A-E7EFDC317691\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C191DC2B-1EC3-48E0-A586-867E6EE4431C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3AA51263-6680-42C6-B119-8241D6F76206\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B4BC41E8-FEDA-4C31-B479-D49A59FC4D63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09C20971-53B5-43B0-AC45-5AA0FDF1B054\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1AEFA5D-A793-4BAB-8DED-3D3A31260AD8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"496902D6-409A-40D9-849F-C41264BE5B04\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2482AB3F-8303-4F95-BE04-C5F06EEF2015\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"244C6952-377C-4AF0-8BA2-C34516A3EB5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98A79CC5-71EC-4E90-9E99-2DF62ABC0122\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6562F3C3-D794-4107-95D4-1C0B0486940B\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CEB24FC-F068-4EBD-BDC8-AB5BC56130DE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E2DF384-3992-43BF-8A5C-65FA53E9A77C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1467583-23E9-4E2B-982D-80A356174BB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DC784C0-5618-4C32-8C17-BE7041656E14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CFB9ABB5-1F78-4CF0-BA82-7833E0F7A56E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF3ED96F-3EA4-4E47-A559-9DF9A7D3DDE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B38EAA4-E948-45A7-B6E5-7214F2B545E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ECC8C49-5A46-4D23-81F9-8243F5D508DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"312848C5-BA35-4A48-B66D-195A5E1CD00F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7453BE5-91C8-42B2-9F75-FFE4038F29A6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2FD44EB-E899-4FA8-985E-44B75134DDC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E13E309-2411-4E1D-B27F-BF5DDDD5D5C5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4E1C795F-CCAC-47AC-B809-BD5510310011\"}]}]}],\"references\":[{\"url\":\"http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2013-0686.html\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/52112\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/52774\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://support.apple.com/kb/HT5784\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://www.debian.org/security/2013/dsa-2620\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2013/02/11/5\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Patch\"]},{\"url\":\"http://www.osvdb.org/90072\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/57896\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain\",\"source\":\"secalert@redhat.com\"}]}}" } }
gsd-2013-0276
Vulnerability from gsd
Modified
2013-02-11 00:00
Details
ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.
Aliases
Aliases
{ "GSD": { "alias": "CVE-2013-0276", "description": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.", "id": "GSD-2013-0276", "references": [ "https://www.suse.com/security/cve/CVE-2013-0276.html", "https://www.debian.org/security/2013/dsa-2620", "https://access.redhat.com/errata/RHSA-2013:0686", "https://access.redhat.com/errata/RHSA-2013:0582" ] }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "affected": [ { "package": { "ecosystem": "RubyGems", "name": "activerecord", "purl": "pkg:gem/activerecord" } } ], "aliases": [ "CVE-2013-0276", "OSVDB-90072" ], "details": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.", "id": "GSD-2013-0276", "modified": "2013-02-11T00:00:00.000Z", "published": "2013-02-11T00:00:00.000Z", "references": [ { "type": "WEB", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276" } ], "schema_version": "1.4.0", "severity": [ { "score": 5.0, "type": "CVSS_V2" } ], "summary": "CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2013-0276", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_affected": "=", "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html", "refsource": "MISC", "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html" }, { "name": "http://support.apple.com/kb/HT5784", "refsource": "MISC", "url": "http://support.apple.com/kb/HT5784" }, { "name": "http://rhn.redhat.com/errata/RHSA-2013-0686.html", "refsource": "MISC", "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html" }, { "name": "http://secunia.com/advisories/52774", "refsource": "MISC", "url": "http://secunia.com/advisories/52774" }, { "name": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html", "refsource": "MISC", "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" }, { "name": "http://secunia.com/advisories/52112", "refsource": "MISC", "url": "http://secunia.com/advisories/52112" }, { "name": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "refsource": "MISC", "url": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/" }, { "name": "http://www.debian.org/security/2013/dsa-2620", "refsource": "MISC", "url": "http://www.debian.org/security/2013/dsa-2620" }, { "name": "http://www.openwall.com/lists/oss-security/2013/02/11/5", "refsource": "MISC", "url": "http://www.openwall.com/lists/oss-security/2013/02/11/5" }, { "name": "http://www.osvdb.org/90072", "refsource": "MISC", "url": "http://www.osvdb.org/90072" }, { "name": "http://www.securityfocus.com/bid/57896", "refsource": "MISC", "url": "http://www.securityfocus.com/bid/57896" }, { "name": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain", "refsource": "MISC", "url": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain" } ] } }, "github.com/rubysec/ruby-advisory-db": { "cve": "2013-0276", "cvss_v2": 5.0, "date": "2013-02-11", "description": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.", "framework": "rails", "gem": "activerecord", "osvdb": 90072, "patched_versions": [ "~\u003e 2.3.17", "~\u003e 3.1.11", "\u003e= 3.2.12" ], "title": "CVE-2013-0276 rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276" }, "gitlab.com": { "advisories": [ { "affected_range": "\u003e=3.0.0 \u003c3.1.11 || \u003e=3.2.0 \u003c3.2.12", "affected_versions": "All versions starting from 3.0.0 before 3.1.11, all versions starting from 3.2.0 before 3.2.12", "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe_ids": [ "CWE-1035", "CWE-264", "CWE-937" ], "date": "2019-08-08", "description": "The `attr_protected` method allows developers to exclude model attributes which users should not be allowed to assign to. By using a specially crafted request, attackers could circumvent this protection and alter values that were meant to be protected.", "fixed_versions": [ "3.1.11", "3.2.12" ], "identifier": "CVE-2013-0276", "identifiers": [ "CVE-2013-0276" ], "not_impacted": "Applications using attr_accessible", "package_slug": "gem/activemodel", "pubdate": "2013-02-12", "solution": "Upgrade, patches and workarounds available (see source)", "title": "Circumvention of attr_protected", "urls": [ "https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/AFBKNY7VSH8" ], "uuid": "47c6f00e-217e-457d-846b-4ff34c14de6f" }, { "affected_range": "\u003c2.3.17", "affected_versions": "All versions before 2.3.17", "cvss_v2": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe_ids": [ "CWE-1035", "CWE-264", "CWE-937" ], "date": "2019-08-08", "description": "The attr_protected method allows developers to specify a denylist of model attributes which users should not be allowed to assign to. By using a specially crafted request, attackers could circumvent this protection and alter values that were meant to be protected.", "fixed_versions": [ "2.3.17" ], "identifier": "CVE-2013-0276", "identifiers": [ "CVE-2013-0276" ], "not_impacted": "Applications using attr_accessible", "package_slug": "gem/activerecord", "pubdate": "2013-02-12", "solution": "Upgrade, patches and workarounds available (see source)", "title": "Circumvention of attr_protected", "urls": [ "https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/AFBKNY7VSH8" ], "uuid": "163d1f51-4f33-4c8c-97fc-3b04c0a2fd1f" } ] }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.3:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.3:rc2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.4:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.0:rc2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.0:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.2:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.2.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc8:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc7:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.1:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.5:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc6:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc5:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.2:rc2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.6:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.4:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:beta1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc4:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.1:rc2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.5:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.0:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.1:rc3:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.2:rc1:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:3.1.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" }, { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.9:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.4:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.3:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.15:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.14:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.13:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.10:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.16:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.11:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:rubyonrails:rails:2.3.12:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "secalert@redhat.com", "ID": "CVE-2013-0276" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-264" } ] } ] }, "references": { "reference_data": [ { "name": "[oss-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "refsource": "MLIST", "tags": [ "Patch" ], "url": "http://www.openwall.com/lists/oss-security/2013/02/11/5" }, { "name": "90072", "refsource": "OSVDB", "tags": [], "url": "http://www.osvdb.org/90072" }, { "name": "57896", "refsource": "BID", "tags": [], "url": "http://www.securityfocus.com/bid/57896" }, { "name": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/", "refsource": "CONFIRM", "tags": [ "Vendor Advisory" ], "url": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released/" }, { "name": "DSA-2620", "refsource": "DEBIAN", "tags": [], "url": "http://www.debian.org/security/2013/dsa-2620" }, { "name": "52112", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/52112" }, { "name": "[rubyonrails-security] 20130211 Circumvention of attr_protected [CVE-2013-0276]", "refsource": "MLIST", "tags": [], "url": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain" }, { "name": "52774", "refsource": "SECUNIA", "tags": [], "url": "http://secunia.com/advisories/52774" }, { "name": "RHSA-2013:0686", "refsource": "REDHAT", "tags": [], "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html" }, { "name": "openSUSE-SU-2013:0462", "refsource": "SUSE", "tags": [], "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" }, { "name": "APPLE-SA-2013-06-04-1", "refsource": "APPLE", "tags": [], "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html" }, { "name": "http://support.apple.com/kb/HT5784", "refsource": "CONFIRM", "tags": [], "url": "http://support.apple.com/kb/HT5784" } ] } }, "impact": { "baseMetricV2": { "cvssV2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false } }, "lastModifiedDate": "2019-08-08T15:42Z", "publishedDate": "2013-02-13T01:55Z" } } }
ghsa-gr44-7grc-37vq
Vulnerability from github
Published
2017-10-24 18:33
Modified
2023-01-23 17:23
Summary
ActiveRecord vulnerable to modification of protected model attributes
Details
ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected
protection mechanism and modify protected model attributes via a crafted request.
{ "affected": [ { "package": { "ecosystem": "RubyGems", "name": "activerecord" }, "ranges": [ { "events": [ { "introduced": "0" }, { "fixed": "2.3.17" } ], "type": "ECOSYSTEM" } ] }, { "package": { "ecosystem": "RubyGems", "name": "activerecord" }, "ranges": [ { "events": [ { "introduced": "3.1.0" }, { "fixed": "3.1.11" } ], "type": "ECOSYSTEM" } ] }, { "package": { "ecosystem": "RubyGems", "name": "activerecord" }, "ranges": [ { "events": [ { "introduced": "3.2.0" }, { "fixed": "3.2.12" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2013-0276" ], "database_specific": { "cwe_ids": [ "CWE-284" ], "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:37:57Z", "nvd_published_at": "2013-02-13T01:55:05Z", "severity": "MODERATE" }, "details": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the `attr_protected` protection mechanism and modify protected model attributes via a crafted request.", "id": "GHSA-gr44-7grc-37vq", "modified": "2023-01-23T17:23:13Z", "published": "2017-10-24T18:33:37Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276" }, { "type": "WEB", "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2013-0276.yml" }, { "type": "WEB", "url": "https://groups.google.com/group/rubyonrails-security/msg/bb44b98a73ef1a06?dmode=source\u0026output=gplain" }, { "type": "WEB", "url": "https://web.archive.org/web/20130217055442/http://www.securityfocus.com/bid/57896" }, { "type": "WEB", "url": "http://lists.apple.com/archives/security-announce/2013/Jun/msg00000.html" }, { "type": "WEB", "url": "http://lists.opensuse.org/opensuse-updates/2013-03/msg00048.html" }, { "type": "WEB", "url": "http://rhn.redhat.com/errata/RHSA-2013-0686.html" }, { "type": "WEB", "url": "http://support.apple.com/kb/HT5784" }, { "type": "WEB", "url": "http://weblog.rubyonrails.org/2013/2/11/SEC-ANN-Rails-3-2-12-3-1-11-and-2-3-17-have-been-released" }, { "type": "WEB", "url": "http://www.debian.org/security/2013/dsa-2620" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2013/02/11/5" } ], "schema_version": "1.4.0", "severity": [], "summary": "ActiveRecord vulnerable to modification of protected model attributes" }
rhsa-2013_0582
Vulnerability from csaf_redhat
Published
2013-02-28 18:53
Modified
2024-11-22 06:19
Summary
Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.1 update
Notes
Topic
Red Hat OpenShift Enterprise 1.1.1 is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
OpenShift Enterprise is a cloud computing Platform-as-a-Service (PaaS)
solution from Red Hat, and is designed for on-premise or private cloud
deployments.
Installing the updated packages and restarting the OpenShift services are
the only requirements for this update. However, if you are updating your
system to Red Hat Enterprise Linux 6.4 while applying OpenShift Enterprise
1.1.1 updates, it is recommended that you restart your system.
For further information about this release, refer to the OpenShift
Enterprise 1.1.1 Technical Notes, available shortly from
https://access.redhat.com/knowledge/docs/
This update also fixes the following security issues:
Multiple cross-site scripting (XSS) flaws were found in rubygem-actionpack.
A remote attacker could use these flaws to conduct XSS attacks against
users of an application using rubygem-actionpack. (CVE-2012-3463,
CVE-2012-3464, CVE-2012-3465)
It was found that certain methods did not sanitize file names before
passing them to lower layer routines in Ruby. If a Ruby application created
files with names based on untrusted input, it could result in the creation
of files with different names than expected. (CVE-2012-4522)
A denial of service flaw was found in the implementation of associative
arrays (hashes) in Ruby. An attacker able to supply a large number of
inputs to a Ruby application (such as HTTP POST request parameters sent to
a web application) that are used as keys when inserting data into an array
could trigger multiple hash function collisions, making array operations
take an excessive amount of CPU time. To mitigate this issue, a new, more
collision resistant algorithm has been used to reduce the chance of an
attacker successfully causing intentional collisions. (CVE-2012-5371)
Input validation vulnerabilities were discovered in rubygem-activerecord.
A remote attacker could possibly use these flaws to perform an SQL
injection attack against an application using rubygem-activerecord.
(CVE-2012-2661, CVE-2012-2695, CVE-2013-0155)
Input validation vulnerabilities were discovered in rubygem-actionpack. A
remote attacker could possibly use these flaws to perform an SQL injection
attack against an application using rubygem-actionpack and
rubygem-activerecord. (CVE-2012-2660, CVE-2012-2694)
A flaw was found in the HTTP digest authentication implementation in
rubygem-actionpack. A remote attacker could use this flaw to cause a
denial of service of an application using rubygem-actionpack and digest
authentication. (CVE-2012-3424)
A flaw was found in the handling of strings in Ruby safe level 4. A remote
attacker can use Exception#to_s to destructively modify an untainted string
so that it is tainted, the string can then be arbitrarily modified.
(CVE-2012-4466)
A flaw was found in the method for translating an exception message into a
string in the Ruby Exception class. A remote attacker could use this flaw
to bypass safe level 4 restrictions, allowing untrusted (tainted) code to
modify arbitrary, trusted (untainted) strings, which safe level 4
restrictions would otherwise prevent. (CVE-2012-4464)
It was found that ruby_parser from rubygem-ruby_parser created a temporary
file in an insecure way. A local attacker could use this flaw to perform a
symbolic link attack, overwriting arbitrary files accessible to the
application using ruby_parser. (CVE-2013-0162)
The CVE-2013-0162 issue was discovered by Michael Scherer of the Red Hat
Regional IT team.
Users are advised to upgrade to Red Hat OpenShift Enterprise 1.1.1.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat OpenShift Enterprise 1.1.1 is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "OpenShift Enterprise is a cloud computing Platform-as-a-Service (PaaS)\nsolution from Red Hat, and is designed for on-premise or private cloud\ndeployments.\n\nInstalling the updated packages and restarting the OpenShift services are\nthe only requirements for this update. However, if you are updating your\nsystem to Red Hat Enterprise Linux 6.4 while applying OpenShift Enterprise\n1.1.1 updates, it is recommended that you restart your system.\n\nFor further information about this release, refer to the OpenShift\nEnterprise 1.1.1 Technical Notes, available shortly from\nhttps://access.redhat.com/knowledge/docs/\n\nThis update also fixes the following security issues:\n\nMultiple cross-site scripting (XSS) flaws were found in rubygem-actionpack.\nA remote attacker could use these flaws to conduct XSS attacks against\nusers of an application using rubygem-actionpack. (CVE-2012-3463,\nCVE-2012-3464, CVE-2012-3465)\n\nIt was found that certain methods did not sanitize file names before\npassing them to lower layer routines in Ruby. If a Ruby application created\nfiles with names based on untrusted input, it could result in the creation\nof files with different names than expected. (CVE-2012-4522)\n\nA denial of service flaw was found in the implementation of associative\narrays (hashes) in Ruby. An attacker able to supply a large number of\ninputs to a Ruby application (such as HTTP POST request parameters sent to\na web application) that are used as keys when inserting data into an array\ncould trigger multiple hash function collisions, making array operations\ntake an excessive amount of CPU time. To mitigate this issue, a new, more\ncollision resistant algorithm has been used to reduce the chance of an\nattacker successfully causing intentional collisions. (CVE-2012-5371)\n\nInput validation vulnerabilities were discovered in rubygem-activerecord.\nA remote attacker could possibly use these flaws to perform an SQL\ninjection attack against an application using rubygem-activerecord.\n(CVE-2012-2661, CVE-2012-2695, CVE-2013-0155)\n\nInput validation vulnerabilities were discovered in rubygem-actionpack. A\nremote attacker could possibly use these flaws to perform an SQL injection\nattack against an application using rubygem-actionpack and\nrubygem-activerecord. (CVE-2012-2660, CVE-2012-2694)\n\nA flaw was found in the HTTP digest authentication implementation in\nrubygem-actionpack. A remote attacker could use this flaw to cause a\ndenial of service of an application using rubygem-actionpack and digest\nauthentication. (CVE-2012-3424)\n\nA flaw was found in the handling of strings in Ruby safe level 4. A remote\nattacker can use Exception#to_s to destructively modify an untainted string\nso that it is tainted, the string can then be arbitrarily modified.\n(CVE-2012-4466)\n\nA flaw was found in the method for translating an exception message into a\nstring in the Ruby Exception class. A remote attacker could use this flaw\nto bypass safe level 4 restrictions, allowing untrusted (tainted) code to\nmodify arbitrary, trusted (untainted) strings, which safe level 4\nrestrictions would otherwise prevent. (CVE-2012-4464)\n\nIt was found that ruby_parser from rubygem-ruby_parser created a temporary\nfile in an insecure way. A local attacker could use this flaw to perform a\nsymbolic link attack, overwriting arbitrary files accessible to the\napplication using ruby_parser. (CVE-2013-0162)\n\nThe CVE-2013-0162 issue was discovered by Michael Scherer of the Red Hat\nRegional IT team.\n\nUsers are advised to upgrade to Red Hat OpenShift Enterprise 1.1.1.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2013:0582", "url": "https://access.redhat.com/errata/RHSA-2013:0582" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "https://access.redhat.com/knowledge/docs/", "url": "https://access.redhat.com/knowledge/docs/" }, { "category": "external", "summary": "827353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=827353" }, { "category": "external", "summary": "827363", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=827363" }, { "category": "external", "summary": "831573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831573" }, { "category": "external", "summary": "831581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831581" }, { "category": "external", "summary": "843711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843711" }, { "category": "external", "summary": "847196", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847196" }, { "category": "external", "summary": "847199", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847199" }, { "category": "external", "summary": "847200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847200" }, { "category": "external", "summary": "862598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=862598" }, { "category": "external", "summary": "862614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=862614" }, { "category": "external", "summary": "865940", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=865940" }, { "category": "external", "summary": "875236", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875236" }, { "category": "external", "summary": "887353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=887353" }, { "category": "external", "summary": "889426", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=889426" }, { "category": "external", "summary": "892806", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806" }, { "category": "external", "summary": "892866", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892866" }, { "category": "external", "summary": "895347", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895347" }, { "category": "external", "summary": "895355", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=895355" }, { "category": "external", "summary": "902412", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=902412" }, { "category": "external", "summary": "902630", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=902630" }, { "category": "external", "summary": "903526", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=903526" }, { "category": "external", "summary": "903546", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=903546" }, { "category": "external", "summary": "905021", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=905021" }, { "category": "external", "summary": "905656", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=905656" }, { "category": "external", "summary": "906227", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=906227" }, { "category": "external", "summary": "906845", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=906845" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0582.json" } ], "title": "Red Hat Security Advisory: Red Hat OpenShift Enterprise 1.1.1 update", "tracking": { "current_release_date": "2024-11-22T06:19:59+00:00", "generator": { "date": "2024-11-22T06:19:59+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2013:0582", "initial_release_date": "2013-02-28T18:53:00+00:00", "revision_history": [ { "date": "2013-02-28T18:53:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2013-02-28T19:05:18+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T06:19:59+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift Enterprise Infrastructure", "product": { "name": "Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:1::el6" } } }, { "category": "product_name", "name": "Red Hat OpenShift Enterprise Node", "product": { "name": "Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:1::el6" } } }, { "category": "product_name", "name": "Red Hat OpenShift Enterprise JBoss EAP add-on", "product": { "name": "Red Hat OpenShift Enterprise JBoss EAP add-on", "product_id": "6Server-RHOSE-JBOSSEAP", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift:1::el6" } } } ], "category": "product_family", "name": "Red Hat OpenShift Enterprise" }, { "branches": [ { "category": "product_version", "name": "rubygem-actionpack-1:3.0.13-4.el6op.src", "product": { "name": "rubygem-actionpack-1:3.0.13-4.el6op.src", "product_id": "rubygem-actionpack-1:3.0.13-4.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.13-4.el6op?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "product": { "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "product_id": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.0.11-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "product": { "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "product_id": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.0.3-1.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src", "product": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src", "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "product": { "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "product_id": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron-1.4@1.0.3-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "product": { "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "product_id": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy-0.1@1.0.3-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "product": { "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "product_id": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy-1.4@1.0.4-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "product": { "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "product_id": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client-1.4@1.0.2-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "product": { "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "product_id": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl-5.10@1.0.3-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "product": { "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "product_id": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql-5.1@1.0.5-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "product": { "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "product_id": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-1.4@1.0.2-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "product": { "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "product_id": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-postgresql-8.4@1.0.3-2.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "product": { "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "product_id": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.9-scl@1.0.8-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "product": { "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "product_id": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.8@1.0.7-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "product": { "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "product_id": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-php-5.3@1.0.5-1.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "product": { "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "product_id": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-auth-remote-user@1.0.5-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-broker-0:1.0.11-1.el6op.src", "product": { "name": "openshift-origin-broker-0:1.0.11-1.el6op.src", "product_id": "openshift-origin-broker-0:1.0.11-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-broker@1.0.11-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-console-0:0.0.16-1.el6op.src", "product": { "name": "openshift-console-0:0.0.16-1.el6op.src", "product_id": "openshift-console-0:0.0.16-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-console@0.0.16-1.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "product": { "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "product_id": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-console@1.0.10-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "product": { "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "product_id": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap-6.0@1.0.4-1.el6op?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "product": { "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "product_id": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews-1.0@1.0.13-1.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-bson-0:1.8.1-2.el6op.src", "product": { "name": "rubygem-bson-0:1.8.1-2.el6op.src", "product_id": "rubygem-bson-0:1.8.1-2.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-bson@1.8.1-2.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-mongo-0:1.8.1-2.el6op.src", "product": { "name": "rubygem-mongo-0:1.8.1-2.el6op.src", "product_id": "rubygem-mongo-0:1.8.1-2.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-mongo@1.8.1-2.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "product": { "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "product_id": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.0.12-1.el6op?arch=src" } } }, { "category": "product_version", "name": "graphviz-0:2.26.0-10.el6.src", "product": { "name": "graphviz-0:2.26.0-10.el6.src", "product_id": "graphviz-0:2.26.0-10.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz@2.26.0-10.el6?arch=src" } } }, { "category": "product_version", "name": "php-0:5.3.3-22.el6.src", "product": { "name": "php-0:5.3.3-22.el6.src", "product_id": "php-0:5.3.3-22.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/php@5.3.3-22.el6?arch=src" } } }, { "category": "product_version", "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src", "product": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src", "product_id": "ruby193-rubygem-railties-0:3.2.8-2.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-railties@3.2.8-2.el6?arch=src" } } }, { "category": "product_version", "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "product": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "product_id": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord@3.2.8-3.el6?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "product": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "product_id": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack@3.2.8-3.el6?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "product": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "product_id": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel@3.2.8-2.el6?arch=src" } } }, { "category": "product_version", "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src", "product": { "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src", "product_id": "openshift-origin-broker-util-0:1.0.15-1.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.0.15-1.el6op?arch=src" } } }, { "category": "product_version", "name": "ruby193-ruby-0:1.9.3.327-25.el6.src", "product": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.src", "product_id": "ruby193-ruby-0:1.9.3.327-25.el6.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby@1.9.3.327-25.el6?arch=src" } } }, { "category": "product_version", "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "product": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "product_id": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser@2.3.1-3.el6op?arch=src" } } }, { "category": "product_version", "name": "rubygem-activerecord-1:3.0.13-5.el6op.src", "product": { "name": "rubygem-activerecord-1:3.0.13-5.el6op.src", "product_id": "rubygem-activerecord-1:3.0.13-5.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activerecord@3.0.13-5.el6op?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:3.0.13-3.el6op.src", "product": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.src", "product_id": "rubygem-activemodel-0:3.0.13-3.el6op.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.13-3.el6op?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch", "product": { "name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch", "product_id": "rubygem-actionpack-1:3.0.13-4.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.13-4.el6op?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "product": { "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "product_id": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-node@1.0.11-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "product": { "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "product_id": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-msg-node-mcollective@1.0.3-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "product": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "product_id": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-ruby_parser@2.0.4-6.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "product": { "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "product_id": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-ruby_parser-doc@2.0.4-6.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "product_id": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-cron-1.4@1.0.3-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "product_id": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-diy-0.1@1.0.3-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "product_id": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-haproxy-1.4@1.0.4-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "product_id": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-client-1.4@1.0.2-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "product_id": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-perl-5.10@1.0.3-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "product_id": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-mysql-5.1@1.0.5-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "product_id": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jenkins-1.4@1.0.2-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "product": { "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "product_id": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-postgresql-8.4@1.0.3-2.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "product_id": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.9-scl@1.0.8-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "product_id": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-ruby-1.8@1.0.7-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "product_id": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-php-5.3@1.0.5-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "product": { "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "product_id": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-auth-remote-user@1.0.5-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch", "product": { "name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch", "product_id": "openshift-origin-broker-0:1.0.11-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-broker@1.0.11-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-console-0:0.0.16-1.el6op.noarch", "product": { "name": "openshift-console-0:0.0.16-1.el6op.noarch", "product_id": "openshift-console-0:0.0.16-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-console@0.0.16-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "product": { "name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "product_id": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-console-doc@1.0.10-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "product": { "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "product_id": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-console@1.0.10-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "product_id": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbosseap-6.0@1.0.4-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "product": { "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "product_id": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-cartridge-jbossews-1.0@1.0.13-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-bson-0:1.8.1-2.el6op.noarch", "product": { "name": "rubygem-bson-0:1.8.1-2.el6op.noarch", "product_id": "rubygem-bson-0:1.8.1-2.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-bson@1.8.1-2.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-mongo-0:1.8.1-2.el6op.noarch", "product": { "name": "rubygem-mongo-0:1.8.1-2.el6op.noarch", "product_id": "rubygem-mongo-0:1.8.1-2.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-mongo@1.8.1-2.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "product": { "name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "product_id": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-mongo-doc@1.8.1-2.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "product": { "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "product_id": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-openshift-origin-controller@1.0.12-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "product": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "product_id": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-railties@3.2.8-2.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "product": { "name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "product_id": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-railties-doc@3.2.8-2.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "product": { "name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "product_id": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord-doc@3.2.8-3.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "product": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "product_id": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activerecord@3.2.8-3.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "product": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "product_id": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack@3.2.8-3.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "product": { "name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "product_id": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-actionpack-doc@3.2.8-3.el6?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "product": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "product_id": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel@3.2.8-2.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "product": { "name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "product_id": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-activemodel-doc@3.2.8-2.el6?arch=noarch" } } }, { "category": "product_version", "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "product": { "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "product_id": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/openshift-origin-broker-util@1.0.15-1.el6op?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "product": { "name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "product_id": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygems-devel@1.8.23-25.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "product": { "name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "product_id": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-irb@1.9.3.327-25.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "product": { "name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "product_id": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-rake@0.9.2.2-25.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygems-0:1.8.23-25.el6.noarch", "product": { "name": "ruby193-rubygems-0:1.8.23-25.el6.noarch", "product_id": "ruby193-rubygems-0:1.8.23-25.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygems@1.8.23-25.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "product": { "name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "product_id": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-minitest@2.5.1-25.el6?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "product": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "product_id": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser@2.3.1-3.el6op?arch=noarch" } } }, { "category": "product_version", "name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "product": { "name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "product_id": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-ruby_parser-doc@2.3.1-3.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch", "product": { "name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch", "product_id": "rubygem-activerecord-1:3.0.13-5.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activerecord@3.0.13-5.el6op?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch", "product": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch", "product_id": "rubygem-activemodel-0:3.0.13-3.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.13-3.el6op?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "product": { "name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "product_id": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel-doc@3.0.13-3.el6op?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "graphviz-ruby-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-ruby-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-ruby-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz-ruby@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "graphviz-doc-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-doc-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-doc-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz-doc@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "graphviz-gd-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-gd-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-gd-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz-gd@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "graphviz-devel-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-devel-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-devel-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz-devel@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz-debuginfo@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "graphviz-0:2.26.0-10.el6.x86_64", "product": { "name": "graphviz-0:2.26.0-10.el6.x86_64", "product_id": "graphviz-0:2.26.0-10.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/graphviz@2.26.0-10.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-mbstring-0:5.3.3-22.el6.x86_64", "product": { "name": "php-mbstring-0:5.3.3-22.el6.x86_64", "product_id": "php-mbstring-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-mbstring@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-devel-0:5.3.3-22.el6.x86_64", "product": { "name": "php-devel-0:5.3.3-22.el6.x86_64", "product_id": "php-devel-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-devel@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-process-0:5.3.3-22.el6.x86_64", "product": { "name": "php-process-0:5.3.3-22.el6.x86_64", "product_id": "php-process-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-process@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-bcmath-0:5.3.3-22.el6.x86_64", "product": { "name": "php-bcmath-0:5.3.3-22.el6.x86_64", "product_id": "php-bcmath-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-bcmath@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-debuginfo-0:5.3.3-22.el6.x86_64", "product": { "name": "php-debuginfo-0:5.3.3-22.el6.x86_64", "product_id": "php-debuginfo-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-debuginfo@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "php-imap-0:5.3.3-22.el6.x86_64", "product": { "name": "php-imap-0:5.3.3-22.el6.x86_64", "product_id": "php-imap-0:5.3.3-22.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/php-imap@5.3.3-22.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "product": { "name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "product_id": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-bigdecimal@1.1.0-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby@1.9.3.327-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "product": { "name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "product_id": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-io-console@0.3-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-libs@1.9.3.327-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "product": { "name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "product_id": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-rdoc@3.9.4-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-doc@1.9.3.327-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-devel@1.9.3.327-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "product": { "name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "product_id": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-rubygem-json@1.5.4-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-tcltk@1.9.3.327-25.el6?arch=x86_64" } } }, { "category": "product_version", "name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "product": { "name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "product_id": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby193-ruby-debuginfo@1.9.3.327-25.el6?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "graphviz-0:2.26.0-10.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src" }, "product_reference": "graphviz-0:2.26.0-10.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-devel-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-devel-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-doc-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-doc-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-gd-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-gd-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "graphviz-ruby-0:2.26.0-10.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64" }, "product_reference": "graphviz-ruby-0:2.26.0-10.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-console-0:0.0.16-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch" }, "product_reference": "openshift-console-0:0.0.16-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-console-0:0.0.16-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src" }, "product_reference": "openshift-console-0:0.0.16-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-broker-0:1.0.11-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch" }, "product_reference": "openshift-origin-broker-0:1.0.11-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-broker-0:1.0.11-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src" }, "product_reference": "openshift-origin-broker-0:1.0.11-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch" }, "product_reference": "openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-broker-util-0:1.0.15-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src" }, "product_reference": "openshift-origin-broker-util-0:1.0.15-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src" }, "product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch" }, "product_reference": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src" }, "product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src" }, "product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src" }, "product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch" }, "product_reference": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src" }, "product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch" }, "product_reference": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch" }, "product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src" }, "product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch" }, "product_reference": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygems-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch" }, "product_reference": "ruby193-rubygems-0:1.8.23-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch" }, "product_reference": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-1:3.0.13-4.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch" }, "product_reference": "rubygem-actionpack-1:3.0.13-4.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-1:3.0.13-4.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src" }, "product_reference": "rubygem-actionpack-1:3.0.13-4.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch" }, "product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src" }, "product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch" }, "product_reference": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activerecord-1:3.0.13-5.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch" }, "product_reference": "rubygem-activerecord-1:3.0.13-5.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activerecord-1:3.0.13-5.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src" }, "product_reference": "rubygem-activerecord-1:3.0.13-5.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bson-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch" }, "product_reference": "rubygem-bson-0:1.8.1-2.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bson-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src" }, "product_reference": "rubygem-bson-0:1.8.1-2.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-mongo-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch" }, "product_reference": "rubygem-mongo-0:1.8.1-2.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-mongo-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src" }, "product_reference": "rubygem-mongo-0:1.8.1-2.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch" }, "product_reference": "rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch" }, "product_reference": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src" }, "product_reference": "rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch" }, "product_reference": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src" }, "product_reference": "rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch" }, "product_reference": "rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch" }, "product_reference": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src" }, "product_reference": "rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch" }, "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src" }, "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.src", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Infrastructure", "product_id": "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" }, "product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-INFRA" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise JBoss EAP add-on", "product_id": "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-JBOSSEAP" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src as a component of Red Hat OpenShift Enterprise JBoss EAP add-on", "product_id": "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-JBOSSEAP" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src" }, "product_reference": "openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch" }, "product_reference": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src" }, "product_reference": "openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch" }, "product_reference": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src" }, "product_reference": "openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-0:5.3.3-22.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src" }, "product_reference": "php-0:5.3.3-22.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-bcmath-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-bcmath-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-debuginfo-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-debuginfo-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-devel-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-devel-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-imap-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-imap-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-mbstring-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-mbstring-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "php-process-0:5.3.3-22.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64" }, "product_reference": "php-process-0:5.3.3-22.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src" }, "product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch" }, "product_reference": "ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64" }, "product_reference": "ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src" }, "product_reference": "ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src" }, "product_reference": "ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src" }, "product_reference": "ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch" }, "product_reference": "ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch" }, "product_reference": "ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-0:3.2.8-2.el6.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src" }, "product_reference": "ruby193-rubygem-railties-0:3.2.8-2.el6.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch" }, "product_reference": "ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch" }, "product_reference": "ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64 as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64" }, "product_reference": "ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch" }, "product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src" }, "product_reference": "ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch" }, "product_reference": "ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygems-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch" }, "product_reference": "ruby193-rubygems-0:1.8.23-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch" }, "product_reference": "ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch" }, "product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.13-3.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src" }, "product_reference": "rubygem-activemodel-0:3.0.13-3.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch" }, "product_reference": "rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bson-0:1.8.1-2.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch" }, "product_reference": "rubygem-bson-0:1.8.1-2.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-bson-0:1.8.1-2.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src" }, "product_reference": "rubygem-bson-0:1.8.1-2.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch" }, "product_reference": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src" }, "product_reference": "rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch" }, "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-0:2.0.4-6.el6op.src as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src" }, "product_reference": "rubygem-ruby_parser-0:2.0.4-6.el6op.src", "relates_to_product_reference": "6Server-RHOSE-NODE" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch as a component of Red Hat OpenShift Enterprise Node", "product_id": "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" }, "product_reference": "rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "relates_to_product_reference": "6Server-RHOSE-NODE" } ] }, "vulnerabilities": [ { "cve": "CVE-2012-2660", "discovery_date": "2012-05-31T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "827353" } ], "notes": [ { "category": "description", "text": "actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2694.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: Unsafe query generation", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-2660" }, { "category": "external", "summary": "RHBZ#827353", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=827353" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-2660", "url": "https://www.cve.org/CVERecord?id=CVE-2012-2660" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2660", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2660" } ], "release_date": "2012-05-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-actionpack: Unsafe query generation" }, { "cve": "CVE-2012-2661", "discovery_date": "2012-05-31T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "827363" } ], "notes": [ { "category": "description", "text": "The Active Record component in Ruby on Rails 3.0.x before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage unintended recursion, a related issue to CVE-2012-2695.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-activerecord: SQL injection when processing nested query paramaters", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-2661" }, { "category": "external", "summary": "RHBZ#827363", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=827363" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-2661", "url": "https://www.cve.org/CVERecord?id=CVE-2012-2661" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2661" } ], "release_date": "2012-05-31T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-activerecord: SQL injection when processing nested query paramaters" }, { "cve": "CVE-2012-2694", "cwe": { "id": "CWE-305", "name": "Authentication Bypass by Primary Weakness" }, "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831581" } ], "notes": [ { "category": "description", "text": "actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain \"[\u0027xyz\u0027, nil]\" values, a related issue to CVE-2012-2660.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-2694" }, { "category": "external", "summary": "RHBZ#831581", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831581" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-2694", "url": "https://www.cve.org/CVERecord?id=CVE-2012-2694" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2694", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2694" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-actionpack: Unsafe query generation (a different flaw than CVE-2012-2660)" }, { "cve": "CVE-2012-2695", "cwe": { "id": "CWE-89", "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)" }, "discovery_date": "2012-06-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "831573" } ], "notes": [ { "category": "description", "text": "The Active Record component in Ruby on Rails before 3.0.14, 3.1.x before 3.1.6, and 3.2.x before 3.2.6 does not properly implement the passing of request data to a where method in an ActiveRecord class, which allows remote attackers to conduct certain SQL injection attacks via nested query parameters that leverage improper handling of nested hashes, a related issue to CVE-2012-2661.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-2695" }, { "category": "external", "summary": "RHBZ#831573", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=831573" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-2695", "url": "https://www.cve.org/CVERecord?id=CVE-2012-2695" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-2695", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-2695" } ], "release_date": "2012-06-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-activerecord: SQL injection when processing nested query paramaters (a different flaw than CVE-2012-2661)" }, { "cve": "CVE-2012-3424", "discovery_date": "2012-07-26T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "843711" } ], "notes": [ { "category": "description", "text": "The decode_credentials method in actionpack/lib/action_controller/metal/http_authentication.rb in Ruby on Rails 3.x before 3.0.16, 3.1.x before 3.1.7, and 3.2.x before 3.2.7 converts Digest Authentication strings to symbols, which allows remote attackers to cause a denial of service by leveraging access to an application that uses a with_http_digest helper method, as demonstrated by the authenticate_or_request_with_http_digest method.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3424" }, { "category": "external", "summary": "RHBZ#843711", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=843711" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3424", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3424" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3424", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3424" } ], "release_date": "2012-07-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-actionpack: DoS vulnerability in authenticate_or_request_with_http_digest" }, { "cve": "CVE-2012-3463", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2012-08-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "847196" } ], "notes": [ { "category": "description", "text": "Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/form_tag_helper.rb in Ruby on Rails 3.x before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via the prompt field to the select_tag helper.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: potential XSS vulnerability in select_tag prompt", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3463" }, { "category": "external", "summary": "RHBZ#847196", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847196" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3463", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3463" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3463", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3463" } ], "release_date": "2012-08-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-actionpack: potential XSS vulnerability in select_tag prompt" }, { "cve": "CVE-2012-3464", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2012-08-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "847199" } ], "notes": [ { "category": "description", "text": "Cross-site scripting (XSS) vulnerability in activesupport/lib/active_support/core_ext/string/output_safety.rb in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 might allow remote attackers to inject arbitrary web script or HTML via vectors involving a \u0027 (quote) character.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: potential XSS vulnerability", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3464" }, { "category": "external", "summary": "RHBZ#847199", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847199" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3464", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3464" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3464", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3464" } ], "release_date": "2012-08-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-actionpack: potential XSS vulnerability" }, { "cve": "CVE-2012-3465", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2012-08-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "847200" } ], "notes": [ { "category": "description", "text": "Cross-site scripting (XSS) vulnerability in actionpack/lib/action_view/helpers/sanitize_helper.rb in the strip_tags helper in Ruby on Rails before 3.0.17, 3.1.x before 3.1.8, and 3.2.x before 3.2.8 allows remote attackers to inject arbitrary web script or HTML via malformed HTML markup.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-actionpack: XSS Vulnerability in strip_tags", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-3465" }, { "category": "external", "summary": "RHBZ#847200", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=847200" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-3465", "url": "https://www.cve.org/CVERecord?id=CVE-2012-3465" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-3465", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3465" } ], "release_date": "2012-08-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-actionpack: XSS Vulnerability in strip_tags" }, { "cve": "CVE-2012-4464", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2012-09-29T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "862598" } ], "notes": [ { "category": "description", "text": "Ruby 1.9.3 before patchlevel 286 and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the (1) exc_to_s or (2) name_err_to_s API function, which marks the string as tainted, a different vulnerability than CVE-2012-4466. NOTE: this issue might exist because of a CVE-2011-1005 regression.", "title": "Vulnerability description" }, { "category": "summary", "text": "1.9.3: Possibility to bypass Ruby\u0027s $SAFE (level 4) semantics", "title": "Vulnerability summary" }, { "category": "other", "text": "Not vulnerable. This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 5 and 6 as they did not provide version 1.9.x, which is the vulnerable version of ruby.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4464" }, { "category": "external", "summary": "RHBZ#862598", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=862598" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4464", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4464" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4464", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4464" } ], "release_date": "2012-09-28T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "1.9.3: Possibility to bypass Ruby\u0027s $SAFE (level 4) semantics" }, { "cve": "CVE-2012-4466", "cwe": { "id": "CWE-266", "name": "Incorrect Privilege Assignment" }, "discovery_date": "2012-10-02T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "862614" } ], "notes": [ { "category": "description", "text": "Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.", "title": "Vulnerability description" }, { "category": "summary", "text": "ruby: safe level bypass via name_err_mesg_to_str()", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4466" }, { "category": "external", "summary": "RHBZ#862614", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=862614" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4466", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4466" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4466", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4466" } ], "release_date": "2012-10-02T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "ruby: safe level bypass via name_err_mesg_to_str()" }, { "cve": "CVE-2012-4522", "cwe": { "id": "CWE-626", "name": "Null Byte Interaction Error (Poison Null Byte)" }, "discovery_date": "2012-10-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "865940" } ], "notes": [ { "category": "description", "text": "The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.", "title": "Vulnerability description" }, { "category": "summary", "text": "ruby: unintentional file creation caused by inserting an illegal NUL character", "title": "Vulnerability summary" }, { "category": "other", "text": "This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-4522" }, { "category": "external", "summary": "RHBZ#865940", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=865940" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-4522", "url": "https://www.cve.org/CVERecord?id=CVE-2012-4522" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-4522", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4522" } ], "release_date": "2012-10-12T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "ruby: unintentional file creation caused by inserting an illegal NUL character" }, { "cve": "CVE-2012-5371", "discovery_date": "2012-11-09T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "875236" } ], "notes": [ { "category": "description", "text": "Ruby (aka CRuby) 1.9 before 1.9.3-p327 and 2.0 before r37575 computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table, as demonstrated by a universal multicollision attack against a variant of the MurmurHash2 algorithm, a different vulnerability than CVE-2011-4815.", "title": "Vulnerability description" }, { "category": "summary", "text": "ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)", "title": "Vulnerability summary" }, { "category": "other", "text": "Not vulnerable. This issue did not affect the versions of ruby as shipped with Red Hat Enterprise Linux 5 and 6.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-5371" }, { "category": "external", "summary": "RHBZ#875236", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=875236" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-5371", "url": "https://www.cve.org/CVERecord?id=CVE-2012-5371" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-5371", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5371" } ], "release_date": "2012-11-09T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "ruby: Murmur hash-flooding DoS flaw in ruby 1.9 (oCERT-2012-001)" }, { "cve": "CVE-2013-0155", "cwe": { "id": "CWE-89", "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)" }, "discovery_date": "2013-01-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "892866" } ], "notes": [ { "category": "description", "text": "Ruby on Rails 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain \"[nil]\" values, a related issue to CVE-2012-2660 and CVE-2012-2694.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0155" }, { "category": "external", "summary": "RHBZ#892866", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892866" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0155", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0155" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0155", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0155" } ], "release_date": "2013-01-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "rubygem-activerecord: Unsafe Query Generation Risk in Ruby on Rails" }, { "acknowledgments": [ { "names": [ "Michael Scherer" ], "organization": "Red Hat Regional IT team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2013-0162", "cwe": { "id": "CWE-377", "name": "Insecure Temporary File" }, "discovery_date": "2013-01-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "892806" } ], "notes": [ { "category": "description", "text": "The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-ruby_parser: incorrect temporary file usage", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0162" }, { "category": "external", "summary": "RHBZ#892806", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=892806" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0162", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0162" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0162" } ], "release_date": "2013-01-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "rubygem-ruby_parser: incorrect temporary file usage" }, { "cve": "CVE-2013-0276", "discovery_date": "2013-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "909528" } ], "notes": [ { "category": "description", "text": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0276" }, { "category": "external", "summary": "RHBZ#909528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909528" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0276", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0276" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276" } ], "release_date": "2013-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-02-28T18:53:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0582" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.src", "6Server-RHOSE-INFRA:graphviz-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-debuginfo-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-devel-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-doc-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-gd-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:graphviz-ruby-0:2.26.0-10.el6.x86_64", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-console-0:0.0.16-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-0:1.0.11-1.el6op.src", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.noarch", "6Server-RHOSE-INFRA:openshift-origin-broker-util-0:1.0.15-1.el6op.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-INFRA:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-INFRA:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-INFRA:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-actionpack-1:3.0.13-4.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-INFRA:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-activerecord-1:3.0.13-5.el6op.src", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-mongo-0:1.8.1-2.el6op.src", "6Server-RHOSE-INFRA:rubygem-mongo-doc-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-auth-remote-user-0:1.0.5-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-0:1.0.10-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-openshift-origin-console-doc-0:1.0.10-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-openshift-origin-controller-0:1.0.12-1.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-INFRA:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-INFRA:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-JBOSSEAP:openshift-origin-cartridge-jbosseap-6.0-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-cron-1.4-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-diy-0.1-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-haproxy-1.4-0:1.0.4-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jbossews-1.0-0:1.0.13-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-jenkins-client-1.4-0:1.0.2-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-mysql-5.1-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-perl-5.10-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-php-5.3-0:1.0.5-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-postgresql-8.4-0:1.0.3-2.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.8-0:1.0.7-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-cartridge-ruby-1.9-scl-0:1.0.8-1.el6op.src", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.noarch", "6Server-RHOSE-NODE:openshift-origin-msg-node-mcollective-0:1.0.3-1.el6op.src", "6Server-RHOSE-NODE:php-0:5.3.3-22.el6.src", "6Server-RHOSE-NODE:php-bcmath-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-debuginfo-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-devel-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-imap-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-mbstring-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:php-process-0:5.3.3-22.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.src", "6Server-RHOSE-NODE:ruby193-ruby-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-debuginfo-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-devel-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-doc-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-irb-0:1.9.3.327-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-ruby-libs-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-ruby-tcltk-0:1.9.3.327-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-actionpack-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activemodel-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-1:3.2.8-3.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-activerecord-doc-1:3.2.8-3.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-bigdecimal-0:1.1.0-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-io-console-0:0.3-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-json-0:1.5.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-minitest-0:2.5.1-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-railties-0:3.2.8-2.el6.src", "6Server-RHOSE-NODE:ruby193-rubygem-railties-doc-0:3.2.8-2.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rake-0:0.9.2.2-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-rdoc-0:3.9.4-25.el6.x86_64", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-0:2.3.1-3.el6op.src", "6Server-RHOSE-NODE:ruby193-rubygem-ruby_parser-doc-0:2.3.1-3.el6op.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:ruby193-rubygems-devel-0:1.8.23-25.el6.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-activemodel-0:3.0.13-3.el6op.src", "6Server-RHOSE-NODE:rubygem-activemodel-doc-0:3.0.13-3.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.noarch", "6Server-RHOSE-NODE:rubygem-bson-0:1.8.1-2.el6op.src", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.noarch", "6Server-RHOSE-NODE:rubygem-openshift-origin-node-0:1.0.11-1.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.noarch", "6Server-RHOSE-NODE:rubygem-ruby_parser-0:2.0.4-6.el6op.src", "6Server-RHOSE-NODE:rubygem-ruby_parser-doc-0:2.0.4-6.el6op.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected" } ] }
rhsa-2013_0686
Vulnerability from csaf_redhat
Published
2013-03-26 19:10
Modified
2024-11-22 06:54
Summary
Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update
Notes
Topic
Red Hat Subscription Asset Manager 1.2.1, which fixes several security
issues, multiple bugs, and adds various enhancements, is now available.
The Red Hat Security Response Team has rated this update as having moderate
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.
Details
Red Hat Subscription Asset Manager acts as a proxy for handling
subscription information and software updates on client machines.
The latest packages for Subscription Asset Manager include a number of security fixes:
When a Subscription Asset Manager instance is created, its configuration
script automatically creates an RPM of the internal subscription service
CA certificate. However, this RPM incorrectly created the CA certificate
with file permissions of 0666. This allowed other users on a client system
to modify the CA certificate used to trust the remote subscription server.
All administrators are advised to update and deploy the subscription
service certificate on all systems which use Subscription Asset Manager
as their subscription service. This procedure is described in:
https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Installation_Guide/sect-Installation_Guide-Administration-Upgrading_Subscription_Asset_Manager.html
(CVE-2012-6116)
Manifest signature checking was not implemented for early versions of
Subscription Asset Manager. This meant that a malicious user could edit
a manifest file, insert arbitrary data, and successfully upload the edited
manifest file into the Subscription Asset Manager server. (CVE-2012-6119)
Ruby's documentation generator had a flaw in the way it generated HTML
documentation. When a Ruby application exposed its documentation
on a network (such as a web page), an attacker could use a specially-
crafted URL to open an arbitrary web script or to execute HTML code
within the application's user session. (CVE-2013-0256)
A timing attack flaw was found in the way rubygem-rack and
ruby193-rubygem-rack processed HMAC digests in cookies. This flaw could aid
an attacker using forged digital signatures to bypass authentication
checks. (CVE-2013-0263)
A flaw in rubygem-json allowed remote attacks by creating different types
of malicious objects. For example, it could initiate a denial of service
(DoS) attack through resource consumption by using a JSON document to
create arbitrary Ruby symbols, which were never garbage collected. It
could also be exploited to create internal objects which could allow a SQL
injection attack. (CVE-2013-0269)
A flaw in ActiveRecord in Ruby on Rails allowed remote attackers to
circumvent attribute protections and to insert their own crafted requests
to change protected attribute values. (CVE-2013-0276)
HTML markup was not properly escaped when filling in the username field in
the Notifications form of the Subscription Asset Manager UI. This meant
that HTML code used in the value was then applied in the UI page when the
entry was viewed. This could have allowed malicious HTML code to be
entered. The field value is now validated and any HTML tags are escaped.
(CVE-2013-1823)
These updated packages also include bug fixes and enhancements:
* Previously, no SELinux policy for the subscription service was included
with the Subscription Asset Manager packages. The candlepin-selinux package
is now included with SELinux policies for the subscription server.
(BZ#906901)
* When attempting to use the subscription service's CA certificate to
validate a manifest during import, the comparison failed. The upstream
subscription service which generated the manifest is a different service
than the local subscription service; thus, they have different CA
certificates. This caused importing a manifest to fail with the error
'archive failed signature'. This has been fixed so that the proper
certificate is used for verification. (BZ#918778)
All users of Subscription Asset Manager are recommended to update to the
latest packages.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Moderate" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "Red Hat Subscription Asset Manager 1.2.1, which fixes several security\nissues, multiple bugs, and adds various enhancements, is now available.\n\nThe Red Hat Security Response Team has rated this update as having moderate\nsecurity impact. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat Subscription Asset Manager acts as a proxy for handling\nsubscription information and software updates on client machines.\n\nThe latest packages for Subscription Asset Manager include a number of security fixes:\n\nWhen a Subscription Asset Manager instance is created, its configuration\nscript automatically creates an RPM of the internal subscription service \nCA certificate. However, this RPM incorrectly created the CA certificate\nwith file permissions of 0666. This allowed other users on a client system\nto modify the CA certificate used to trust the remote subscription server.\nAll administrators are advised to update and deploy the subscription\nservice certificate on all systems which use Subscription Asset Manager\nas their subscription service. This procedure is described in:\nhttps://access.redhat.com/knowledge/docs/en-US/Red_Hat_Subscription_Asset_Manager/1.2/html/Installation_Guide/sect-Installation_Guide-Administration-Upgrading_Subscription_Asset_Manager.html\n(CVE-2012-6116)\n\nManifest signature checking was not implemented for early versions of \nSubscription Asset Manager. This meant that a malicious user could edit\na manifest file, insert arbitrary data, and successfully upload the edited\nmanifest file into the Subscription Asset Manager server. (CVE-2012-6119)\n\nRuby\u0027s documentation generator had a flaw in the way it generated HTML\ndocumentation. When a Ruby application exposed its documentation\non a network (such as a web page), an attacker could use a specially-\ncrafted URL to open an arbitrary web script or to execute HTML code\nwithin the application\u0027s user session. (CVE-2013-0256)\n\nA timing attack flaw was found in the way rubygem-rack and\nruby193-rubygem-rack processed HMAC digests in cookies. This flaw could aid\nan attacker using forged digital signatures to bypass authentication\nchecks. (CVE-2013-0263)\n\nA flaw in rubygem-json allowed remote attacks by creating different types\nof malicious objects. For example, it could initiate a denial of service\n(DoS) attack through resource consumption by using a JSON document to\ncreate arbitrary Ruby symbols, which were never garbage collected. It\ncould also be exploited to create internal objects which could allow a SQL\ninjection attack. (CVE-2013-0269)\n\nA flaw in ActiveRecord in Ruby on Rails allowed remote attackers to\ncircumvent attribute protections and to insert their own crafted requests\nto change protected attribute values. (CVE-2013-0276)\n\nHTML markup was not properly escaped when filling in the username field in\nthe Notifications form of the Subscription Asset Manager UI. This meant\nthat HTML code used in the value was then applied in the UI page when the\nentry was viewed. This could have allowed malicious HTML code to be\nentered. The field value is now validated and any HTML tags are escaped.\n(CVE-2013-1823)\n\nThese updated packages also include bug fixes and enhancements:\n\n* Previously, no SELinux policy for the subscription service was included\nwith the Subscription Asset Manager packages. The candlepin-selinux package\nis now included with SELinux policies for the subscription server. \n(BZ#906901)\n\n* When attempting to use the subscription service\u0027s CA certificate to\nvalidate a manifest during import, the comparison failed. The upstream\nsubscription service which generated the manifest is a different service\nthan the local subscription service; thus, they have different CA\ncertificates. This caused importing a manifest to fail with the error\n\u0027archive failed signature\u0027. This has been fixed so that the proper\ncertificate is used for verification. (BZ#918778)\n\nAll users of Subscription Asset Manager are recommended to update to the\nlatest packages.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2013:0686", "url": "https://access.redhat.com/errata/RHSA-2013:0686" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#moderate", "url": "https://access.redhat.com/security/updates/classification/#moderate" }, { "category": "external", "summary": "906207", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=906207" }, { "category": "external", "summary": "906901", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=906901" }, { "category": "external", "summary": "907820", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820" }, { "category": "external", "summary": "908613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908613" }, { "category": "external", "summary": "909029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909029" }, { "category": "external", "summary": "909071", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909071" }, { "category": "external", "summary": "909528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909528" }, { "category": "external", "summary": "918778", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=918778" }, { "category": "external", "summary": "918784", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=918784" }, { "category": "external", "summary": "922190", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=922190" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0686.json" } ], "title": "Red Hat Security Advisory: Subscription Asset Manager 1.2.1 update", "tracking": { "current_release_date": "2024-11-22T06:54:39+00:00", "generator": { "date": "2024-11-22T06:54:39+00:00", "engine": { "name": "Red Hat SDEngine", "version": "4.2.1" } }, "id": "RHSA-2013:0686", "initial_release_date": "2013-03-26T19:10:00+00:00", "revision_history": [ { "date": "2013-03-26T19:10:00+00:00", "number": "1", "summary": "Initial version" }, { "date": "2013-03-26T19:16:44+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2024-11-22T06:54:39+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Subscription Asset Manager for RHEL 6 Server", "product": { "name": "Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12", "product_identification_helper": { "cpe": "cpe:/a:rhel_sam:1.2::el6" } } } ], "category": "product_family", "name": "Red Hat Subscription Asset Manager" }, { "branches": [ { "category": "product_version", "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "product": { "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "product_id": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rails_warden-doc@0.5.5-2.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "product": { "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "product": { "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "product": { "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "product_id": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-delayed_job-doc@2.1.4-3.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "product": { "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "product_id": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-nokogiri-doc@1.5.0-0.9.beta4.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "product": { "name": "rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "product_id": "rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.10-12.el6cf?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "candlepin-0:0.7.24-1.el6_3.noarch", "product": { "name": "candlepin-0:0.7.24-1.el6_3.noarch", "product_id": "candlepin-0:0.7.24-1.el6_3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@0.7.24-1.el6_3?arch=noarch" } } }, { "category": "product_version", "name": "candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "product": { "name": "candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "product_id": "candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-tomcat6@0.7.24-1.el6_3?arch=noarch" } } }, { "category": "product_version", "name": "candlepin-selinux-0:0.7.24-1.el6_3.noarch", "product": { "name": "candlepin-selinux-0:0.7.24-1.el6_3.noarch", "product_id": "candlepin-selinux-0:0.7.24-1.el6_3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-selinux@0.7.24-1.el6_3?arch=noarch" } } }, { "category": "product_version", "name": "candlepin-devel-0:0.7.24-1.el6_3.noarch", "product": { "name": "candlepin-devel-0:0.7.24-1.el6_3.noarch", "product_id": "candlepin-devel-0:0.7.24-1.el6_3.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin-devel@0.7.24-1.el6_3?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rack-1:1.3.0-4.el6cf.noarch", "product": { "name": "rubygem-rack-1:1.3.0-4.el6cf.noarch", "product_id": "rubygem-rack-1:1.3.0-4.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-4.el6cf?arch=noarch\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "product": { "name": "rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "product_id": "rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel-doc@3.0.10-3.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "product": { "name": "rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "product_id": "rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.10-3.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "product": { "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "product_id": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rdoc-doc@3.8-6.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch", "product": { "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch", "product_id": "rubygem-rdoc-0:3.8-6.el6cf.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=noarch" } } }, { "category": "product_version", "name": "katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "product": { "name": "katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "product_id": "katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-headpin@1.2.1.1-1h.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "product": { "name": "katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "product_id": "katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-glue-candlepin@1.2.1.1-1h.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "katello-common-0:1.2.1.1-1h.el6_4.noarch", "product": { "name": "katello-common-0:1.2.1.1-1h.el6_4.noarch", "product_id": "katello-common-0:1.2.1.1-1h.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-common@1.2.1.1-1h.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "product": { "name": "katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "product_id": "katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-headpin-all@1.2.1.1-1h.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "thumbslug-0:0.0.28.1-1.el6_4.noarch", "product": { "name": "thumbslug-0:0.0.28.1-1.el6_4.noarch", "product_id": "thumbslug-0:0.0.28.1-1.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/thumbslug@0.0.28.1-1.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch", "product": { "name": "thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch", "product_id": "thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/thumbslug-selinux@0.0.28.1-1.el6_4?arch=noarch" } } }, { "category": "product_version", "name": "katello-configure-0:1.2.3.1-4h.el6_4.noarch", "product": { "name": "katello-configure-0:1.2.3.1-4h.el6_4.noarch", "product_id": "katello-configure-0:1.2.3.1-4h.el6_4.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-configure@1.2.3.1-4h.el6_4?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src", "product": { "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src", "product_id": "rubygem-rails_warden-0:0.5.5-2.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rails_warden@0.5.5-2.el6cf?arch=src" } } }, { "category": "product_version", "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src", "product": { "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src", "product_id": "rubygem-delayed_job-0:2.1.4-3.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-delayed_job@2.1.4-3.el6cf?arch=src" } } }, { "category": "product_version", "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "product": { "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=src" } } }, { "category": "product_version", "name": "rubygem-actionpack-1:3.0.10-12.el6cf.src", "product": { "name": "rubygem-actionpack-1:3.0.10-12.el6cf.src", "product_id": "rubygem-actionpack-1:3.0.10-12.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-actionpack@3.0.10-12.el6cf?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "candlepin-0:0.7.24-1.el6_3.src", "product": { "name": "candlepin-0:0.7.24-1.el6_3.src", "product_id": "candlepin-0:0.7.24-1.el6_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/candlepin@0.7.24-1.el6_3?arch=src" } } }, { "category": "product_version", "name": "rubygem-rack-1:1.3.0-4.el6cf.src", "product": { "name": "rubygem-rack-1:1.3.0-4.el6cf.src", "product_id": "rubygem-rack-1:1.3.0-4.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rack@1.3.0-4.el6cf?arch=src\u0026epoch=1" } } }, { "category": "product_version", "name": "rubygem-activemodel-0:3.0.10-3.el6cf.src", "product": { "name": "rubygem-activemodel-0:3.0.10-3.el6cf.src", "product_id": "rubygem-activemodel-0:3.0.10-3.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-activemodel@3.0.10-3.el6cf?arch=src" } } }, { "category": "product_version", "name": "rubygem-rdoc-0:3.8-6.el6cf.src", "product": { "name": "rubygem-rdoc-0:3.8-6.el6cf.src", "product_id": "rubygem-rdoc-0:3.8-6.el6cf.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-rdoc@3.8-6.el6cf?arch=src" } } }, { "category": "product_version", "name": "katello-0:1.2.1.1-1h.el6_4.src", "product": { "name": "katello-0:1.2.1.1-1h.el6_4.src", "product_id": "katello-0:1.2.1.1-1h.el6_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello@1.2.1.1-1h.el6_4?arch=src" } } }, { "category": "product_version", "name": "rubygem-json-0:1.7.3-2.el6_3.src", "product": { "name": "rubygem-json-0:1.7.3-2.el6_3.src", "product_id": "rubygem-json-0:1.7.3-2.el6_3.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-json@1.7.3-2.el6_3?arch=src" } } }, { "category": "product_version", "name": "thumbslug-0:0.0.28.1-1.el6_4.src", "product": { "name": "thumbslug-0:0.0.28.1-1.el6_4.src", "product_id": "thumbslug-0:0.0.28.1-1.el6_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/thumbslug@0.0.28.1-1.el6_4?arch=src" } } }, { "category": "product_version", "name": "katello-configure-0:1.2.3.1-4h.el6_4.src", "product": { "name": "katello-configure-0:1.2.3.1-4h.el6_4.src", "product_id": "katello-configure-0:1.2.3.1-4h.el6_4.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/katello-configure@1.2.3.1-4h.el6_4?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "product": { "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_id": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-nokogiri-debuginfo@1.5.0-0.9.beta4.el6cf?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product": { "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_id": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64" } } }, { "category": "product_version", "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product": { "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_id": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/ruby-nokogiri@1.5.0-0.9.beta4.el6cf?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "product": { "name": "rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "product_id": "rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-json-debuginfo@1.7.3-2.el6_3?arch=x86_64" } } }, { "category": "product_version", "name": "rubygem-json-0:1.7.3-2.el6_3.x86_64", "product": { "name": "rubygem-json-0:1.7.3-2.el6_3.x86_64", "product_id": "rubygem-json-0:1.7.3-2.el6_3.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/rubygem-json@1.7.3-2.el6_3?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:0.7.24-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch" }, "product_reference": "candlepin-0:0.7.24-1.el6_3.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-0:0.7.24-1.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src" }, "product_reference": "candlepin-0:0.7.24-1.el6_3.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-devel-0:0.7.24-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch" }, "product_reference": "candlepin-devel-0:0.7.24-1.el6_3.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-selinux-0:0.7.24-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch" }, "product_reference": "candlepin-selinux-0:0.7.24-1.el6_3.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "candlepin-tomcat6-0:0.7.24-1.el6_3.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch" }, "product_reference": "candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-0:1.2.1.1-1h.el6_4.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src" }, "product_reference": "katello-0:1.2.1.1-1h.el6_4.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-common-0:1.2.1.1-1h.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch" }, "product_reference": "katello-common-0:1.2.1.1-1h.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-configure-0:1.2.3.1-4h.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch" }, "product_reference": "katello-configure-0:1.2.3.1-4h.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-configure-0:1.2.3.1-4h.el6_4.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src" }, "product_reference": "katello-configure-0:1.2.3.1-4h.el6_4.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch" }, "product_reference": "katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-headpin-0:1.2.1.1-1h.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch" }, "product_reference": "katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch" }, "product_reference": "katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64" }, "product_reference": "ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-1:3.0.10-12.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch" }, "product_reference": "rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-actionpack-1:3.0.10-12.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src" }, "product_reference": "rubygem-actionpack-1:3.0.10-12.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.10-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch" }, "product_reference": "rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-0:3.0.10-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src" }, "product_reference": "rubygem-activemodel-0:3.0.10-3.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch" }, "product_reference": "rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch" }, "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-delayed_job-0:2.1.4-3.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src" }, "product_reference": "rubygem-delayed_job-0:2.1.4-3.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch" }, "product_reference": "rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:1.7.3-2.el6_3.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src" }, "product_reference": "rubygem-json-0:1.7.3-2.el6_3.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-0:1.7.3-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64" }, "product_reference": "rubygem-json-0:1.7.3-2.el6_3.x86_64", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64" }, "product_reference": "rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src" }, "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64" }, "product_reference": "rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64 as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64" }, "product_reference": "rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch" }, "product_reference": "rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rack-1:1.3.0-4.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch" }, "product_reference": "rubygem-rack-1:1.3.0-4.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rack-1:1.3.0-4.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src" }, "product_reference": "rubygem-rack-1:1.3.0-4.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch" }, "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rails_warden-0:0.5.5-2.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src" }, "product_reference": "rubygem-rails_warden-0:0.5.5-2.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch" }, "product_reference": "rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rdoc-0:3.8-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch" }, "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rdoc-0:3.8-6.el6cf.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src" }, "product_reference": "rubygem-rdoc-0:3.8-6.el6cf.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch" }, "product_reference": "rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "thumbslug-0:0.0.28.1-1.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch" }, "product_reference": "thumbslug-0:0.0.28.1-1.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "thumbslug-0:0.0.28.1-1.el6_4.src as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src" }, "product_reference": "thumbslug-0:0.0.28.1-1.el6_4.src", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" }, { "category": "default_component_of", "full_product_name": { "name": "thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch as a component of Red Hat Subscription Asset Manager for RHEL 6 Server", "product_id": "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" }, "product_reference": "thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch", "relates_to_product_reference": "6Server-SubscriptionAssetManager12" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Dominic Cleal" ] }, { "names": [ "James Laska" ], "organization": "Red Hat", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2012-6116", "discovery_date": "2012-11-16T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "906207" } ], "notes": [ { "category": "description", "text": "modules/certs/manifests/config.pp in katello-configure before 1.3.3.pulpv2 in Katello uses weak permissions (666) for the Candlepin bootstrap RPM, which allows local users to modify the Candlepin CA certificate by writing to this file.", "title": "Vulnerability description" }, { "category": "summary", "text": "Candlepin: bootstrap RPM deploys CA certificate file with mode 666", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-6116" }, { "category": "external", "summary": "RHBZ#906207", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=906207" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6116", "url": "https://www.cve.org/CVERecord?id=CVE-2012-6116" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6116", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6116" } ], "release_date": "2013-02-21T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Candlepin: bootstrap RPM deploys CA certificate file with mode 666" }, { "cve": "CVE-2012-6119", "discovery_date": "2013-02-01T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "908613" } ], "notes": [ { "category": "description", "text": "Candlepin before 0.7.24, as used in Red Hat Subscription Asset Manager before 1.2.1, does not properly check manifest signatures, which allows local users to modify manifests.", "title": "Vulnerability description" }, { "category": "summary", "text": "Candlepin: Re-enable manifest signature checking", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2012-6119" }, { "category": "external", "summary": "RHBZ#908613", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=908613" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2012-6119", "url": "https://www.cve.org/CVERecord?id=CVE-2012-6119" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2012-6119", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6119" } ], "release_date": "2012-06-27T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "Candlepin: Re-enable manifest signature checking" }, { "acknowledgments": [ { "names": [ "Eric Hodel" ], "organization": "RDoc upstream" }, { "names": [ "Evgeny Ermakov" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2013-0256", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2013-02-05T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "907820" } ], "notes": [ { "category": "description", "text": "darkfish.js in RDoc 2.3.0 through 3.12 and 4.x before 4.0.0.preview2.1, as used in Ruby, does not properly generate documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted URL.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0256" }, { "category": "external", "summary": "RHBZ#907820", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=907820" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0256", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0256" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0256" }, { "category": "external", "summary": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/", "url": "http://www.ruby-lang.org/en/news/2013/02/06/rdoc-xss-cve-2013-0256/" } ], "release_date": "2013-02-06T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-rdoc: Cross-site scripting in the documentation created by Darkfish Rdoc HTML generator / template" }, { "cve": "CVE-2013-0263", "discovery_date": "2013-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "909071" } ], "notes": [ { "category": "description", "text": "Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-rack: Timing attack in cookie sessions", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0263" }, { "category": "external", "summary": "RHBZ#909071", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909071" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0263", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0263" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0263", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0263" } ], "release_date": "2013-02-08T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-rack: Timing attack in cookie sessions" }, { "acknowledgments": [ { "names": [ "Ruby on Rails upstream" ] }, { "names": [ "Thomas Hollstegge" ], "organization": "Zweitag", "summary": "Acknowledged by upstream." }, { "names": [ "Ben Murphy" ], "summary": "Acknowledged by upstream." } ], "cve": "CVE-2013-0269", "cwe": { "id": "CWE-502", "name": "Deserialization of Untrusted Data" }, "discovery_date": "2013-02-07T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "909029" } ], "notes": [ { "category": "description", "text": "The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka \"Unsafe Object Creation Vulnerability.\"", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-json: Denial of Service and SQL Injection", "title": "Vulnerability summary" }, { "category": "other", "text": "Red Hat Satellite tools ship RubyGem Json 1.4.6 which is earlier than affected 1.5.5 version however, this version of RubyGem is not affected to the flaw. We may update RubyGem in a future release.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0269" }, { "category": "external", "summary": "RHBZ#909029", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909029" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0269", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0269" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0269", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0269" }, { "category": "external", "summary": "http://www.ruby-lang.org/en/news/2013/02/22/json-dos-cve-2013-0269/", "url": "http://www.ruby-lang.org/en/news/2013/02/22/json-dos-cve-2013-0269/" } ], "release_date": "2013-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-json: Denial of Service and SQL Injection" }, { "cve": "CVE-2013-0276", "discovery_date": "2013-02-08T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "909528" } ], "notes": [ { "category": "description", "text": "ActiveRecord in Ruby on Rails before 2.3.17, 3.1.x before 3.1.11, and 3.2.x before 3.2.12 allows remote attackers to bypass the attr_protected protection mechanism and modify protected model attributes via a crafted request.", "title": "Vulnerability description" }, { "category": "summary", "text": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-0276" }, { "category": "external", "summary": "RHBZ#909528", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=909528" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-0276", "url": "https://www.cve.org/CVERecord?id=CVE-2013-0276" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-0276" } ], "release_date": "2013-02-11T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "rubygem-activerecord/rubygem-activemodel: circumvention of attr_protected" }, { "acknowledgments": [ { "names": [ "Sureshkumar Thirugnanasambandan" ], "organization": "Red Hat Quality Engineering Team", "summary": "This issue was discovered by Red Hat." } ], "cve": "CVE-2013-1823", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)" }, "discovery_date": "2013-02-12T00:00:00+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "918784" } ], "notes": [ { "category": "description", "text": "Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username field.", "title": "Vulnerability description" }, { "category": "summary", "text": "Katello: Notifications page Username XSS", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2013-1823" }, { "category": "external", "summary": "RHBZ#918784", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=918784" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2013-1823", "url": "https://www.cve.org/CVERecord?id=CVE-2013-1823" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2013-1823", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-1823" } ], "release_date": "2013-03-26T00:00:00+00:00", "remediations": [ { "category": "vendor_fix", "date": "2013-03-26T19:10:00+00:00", "details": "Before applying this update, make sure all previously-released errata\nrelevant to your system have been applied.\n\nThis update is available via the Red Hat Network. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/knowledge/articles/11258", "product_ids": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2013:0686" } ], "scores": [ { "cvss_v2": { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0" }, "products": [ "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-0:0.7.24-1.el6_3.src", "6Server-SubscriptionAssetManager12:candlepin-devel-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-selinux-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:candlepin-tomcat6-0:0.7.24-1.el6_3.noarch", "6Server-SubscriptionAssetManager12:katello-0:1.2.1.1-1h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-common-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-configure-0:1.2.3.1-4h.el6_4.src", "6Server-SubscriptionAssetManager12:katello-glue-candlepin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:katello-headpin-all-0:1.2.1.1-1h.el6_4.noarch", "6Server-SubscriptionAssetManager12:ruby-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-actionpack-1:3.0.10-12.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-activemodel-0:3.0.10-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-activemodel-doc-0:3.0.10-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-0:2.1.4-3.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-delayed_job-doc-0:2.1.4-3.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.src", "6Server-SubscriptionAssetManager12:rubygem-json-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-json-debuginfo-0:1.7.3-2.el6_3.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-debuginfo-0:1.5.0-0.9.beta4.el6cf.x86_64", "6Server-SubscriptionAssetManager12:rubygem-nokogiri-doc-0:1.5.0-0.9.beta4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rack-1:1.3.0-4.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-0:0.5.5-2.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rails_warden-doc-0:0.5.5-2.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:rubygem-rdoc-0:3.8-6.el6cf.src", "6Server-SubscriptionAssetManager12:rubygem-rdoc-doc-0:3.8-6.el6cf.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.noarch", "6Server-SubscriptionAssetManager12:thumbslug-0:0.0.28.1-1.el6_4.src", "6Server-SubscriptionAssetManager12:thumbslug-selinux-0:0.0.28.1-1.el6_4.noarch" ] } ], "threats": [ { "category": "impact", "details": "Low" } ], "title": "Katello: Notifications page Username XSS" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.